General

  • Target

    62aa39a75cba14031ed0dfcfd9ed3130_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240530-d4e96sdh66

  • MD5

    62aa39a75cba14031ed0dfcfd9ed3130

  • SHA1

    d984ec81cc86737d6dcbef22d31bff241389f2cf

  • SHA256

    484b3da51dac352af75f419d9dd5816a1720db03a2794c22849ae1bdfd975bab

  • SHA512

    1ab30fbbb3bee597958e0becd03074ea3ac7c325d56a970a3ab015a448dd847185d51f775e3dcbc9c8755610beeee12bc4f8c90b20ad6e74266e15fafd752146

  • SSDEEP

    24576:FrxPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWbvrec:XbazR0vKLXZ5Tec

Malware Config

Targets

    • Target

      62aa39a75cba14031ed0dfcfd9ed3130_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      62aa39a75cba14031ed0dfcfd9ed3130

    • SHA1

      d984ec81cc86737d6dcbef22d31bff241389f2cf

    • SHA256

      484b3da51dac352af75f419d9dd5816a1720db03a2794c22849ae1bdfd975bab

    • SHA512

      1ab30fbbb3bee597958e0becd03074ea3ac7c325d56a970a3ab015a448dd847185d51f775e3dcbc9c8755610beeee12bc4f8c90b20ad6e74266e15fafd752146

    • SSDEEP

      24576:FrxPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWbvrec:XbazR0vKLXZ5Tec

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks