General

  • Target

    ebd0b303045b773b6c056f59f7e8ce50_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240530-ljsc1aeb43

  • MD5

    ebd0b303045b773b6c056f59f7e8ce50

  • SHA1

    5db3d63cee5a6010796f35a582a76d5b40fc86e7

  • SHA256

    df01983c2a9f9008429e077bde02bb4acaf96a696d420d131f2921029bc7d943

  • SHA512

    1d70cefd0e888b4e05eaa7c48c9f0d7cbb93d65320c3f6c305e5536128c6ca1539a14901bd7f6226b9768c8a1efcae390cfa5368908b956aa6862d2c28bc3750

  • SSDEEP

    6144:+Hv8XYFIpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GA0:+Hv8XxpV6yYPI3cpV6yYPZ0PVdvcY9+y

Malware Config

Targets

    • Target

      ebd0b303045b773b6c056f59f7e8ce50_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      ebd0b303045b773b6c056f59f7e8ce50

    • SHA1

      5db3d63cee5a6010796f35a582a76d5b40fc86e7

    • SHA256

      df01983c2a9f9008429e077bde02bb4acaf96a696d420d131f2921029bc7d943

    • SHA512

      1d70cefd0e888b4e05eaa7c48c9f0d7cbb93d65320c3f6c305e5536128c6ca1539a14901bd7f6226b9768c8a1efcae390cfa5368908b956aa6862d2c28bc3750

    • SSDEEP

      6144:+Hv8XYFIpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GA0:+Hv8XxpV6yYPI3cpV6yYPZ0PVdvcY9+y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks