General

  • Target

    a07ed1cc97e0d8ed509deed35c514d50_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240530-kmj1cscb7t

  • MD5

    a07ed1cc97e0d8ed509deed35c514d50

  • SHA1

    2b1bb2ee4344348e1722602cda3c012feb2ccaf3

  • SHA256

    2aa8d7484218f06348ee61c52698e552d8d9d257db3af2ec791ae4da55bd7bb7

  • SHA512

    0a67be90d98600190558192a1757e484511eee0aac158237aa901d35a770f6aeba8855b873270aa8d1b82193268b49a3cf25ef80ae9497f87e27af21c653fc1d

  • SSDEEP

    6144:mLqiO614qwgQXcXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:m2iO61Dwgb5IKrEAlnLAg

Malware Config

Targets

    • Target

      a07ed1cc97e0d8ed509deed35c514d50_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      a07ed1cc97e0d8ed509deed35c514d50

    • SHA1

      2b1bb2ee4344348e1722602cda3c012feb2ccaf3

    • SHA256

      2aa8d7484218f06348ee61c52698e552d8d9d257db3af2ec791ae4da55bd7bb7

    • SHA512

      0a67be90d98600190558192a1757e484511eee0aac158237aa901d35a770f6aeba8855b873270aa8d1b82193268b49a3cf25ef80ae9497f87e27af21c653fc1d

    • SSDEEP

      6144:mLqiO614qwgQXcXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:m2iO61Dwgb5IKrEAlnLAg

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks