General

  • Target

    eb921535dfb5c928a9f42bbef9f97320_NeikiAnalytics.exe

  • Size

    352KB

  • Sample

    240530-lpjcaadd2v

  • MD5

    eb921535dfb5c928a9f42bbef9f97320

  • SHA1

    9638b8b5878253415cff0ae2c9d57663dfbf0872

  • SHA256

    85ea4e1291c9156dce934524b79739641bb7f12afb75145649f36d0583671565

  • SHA512

    aa19a46f373186461e8e91c49c2d3e29d22fede656e4bc55f26e34ae3b31869a7a0a5e90b6cdba0931b56f92de858032b1baac7c66c36e13ed3cd1084f5b7bef

  • SSDEEP

    6144:A16W5sH+xpCf7pr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFv:Qzc+xpCVrCZYE6YYBHpd0uD319ZvSntr

Malware Config

Targets

    • Target

      eb921535dfb5c928a9f42bbef9f97320_NeikiAnalytics.exe

    • Size

      352KB

    • MD5

      eb921535dfb5c928a9f42bbef9f97320

    • SHA1

      9638b8b5878253415cff0ae2c9d57663dfbf0872

    • SHA256

      85ea4e1291c9156dce934524b79739641bb7f12afb75145649f36d0583671565

    • SHA512

      aa19a46f373186461e8e91c49c2d3e29d22fede656e4bc55f26e34ae3b31869a7a0a5e90b6cdba0931b56f92de858032b1baac7c66c36e13ed3cd1084f5b7bef

    • SSDEEP

      6144:A16W5sH+xpCf7pr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFv:Qzc+xpCVrCZYE6YYBHpd0uD319ZvSntr

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks