General

  • Target

    68aafc92c4ab6c2a8a42fd85c0f58260_NeikiAnalytics.exe

  • Size

    448KB

  • Sample

    240530-he498aae93

  • MD5

    68aafc92c4ab6c2a8a42fd85c0f58260

  • SHA1

    29b255a1a843b56ead3f431804a0dea9be87976f

  • SHA256

    3ebcb5f9dc637b791f66f705d869e9696014f2c604dd294d707f26e53643a9c6

  • SHA512

    e4e9f2006ae4fec28b96458a5a009f002c0d0de69e85aac0f0e192817c2c9406237839b31b75d7ecb4979021f64dbc47497c0a65ce810e8cb69c313e9262ba51

  • SSDEEP

    6144:tSmcznMxerlttZoAG9TMOFwA7SkEjiPISUOgW9X+hOGzC/NM:OzPZoAwZbWkmZzcukG2/

Malware Config

Targets

    • Target

      68aafc92c4ab6c2a8a42fd85c0f58260_NeikiAnalytics.exe

    • Size

      448KB

    • MD5

      68aafc92c4ab6c2a8a42fd85c0f58260

    • SHA1

      29b255a1a843b56ead3f431804a0dea9be87976f

    • SHA256

      3ebcb5f9dc637b791f66f705d869e9696014f2c604dd294d707f26e53643a9c6

    • SHA512

      e4e9f2006ae4fec28b96458a5a009f002c0d0de69e85aac0f0e192817c2c9406237839b31b75d7ecb4979021f64dbc47497c0a65ce810e8cb69c313e9262ba51

    • SSDEEP

      6144:tSmcznMxerlttZoAG9TMOFwA7SkEjiPISUOgW9X+hOGzC/NM:OzPZoAwZbWkmZzcukG2/

    Score
    10/10
    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks