General

  • Target

    8de51be9157894d91c1d1380df9e2730_NeikiAnalytics.exe

  • Size

    276KB

  • Sample

    240530-mpj49aed8v

  • MD5

    8de51be9157894d91c1d1380df9e2730

  • SHA1

    b52f4243a668070f2f2e519d08c89267a346ac60

  • SHA256

    630b9cbaff656f49fadb0cce0ff081ddb136f2d888c26955af57170e4d7b5989

  • SHA512

    04d89b00b921676a190994affe0ae6e97d1934187b308cd3d2ce58dd957b3f21d7bca21495ceb186cf49d5a4b24e5c9ec02c1ba6a0f5377b06ba8afb9ea4be91

  • SSDEEP

    3072:2R69Eel415kYE3eDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvc:MTnE3MdWZHEFJ7aWN1rtMsQBOSGaF+

Malware Config

Targets

    • Target

      8de51be9157894d91c1d1380df9e2730_NeikiAnalytics.exe

    • Size

      276KB

    • MD5

      8de51be9157894d91c1d1380df9e2730

    • SHA1

      b52f4243a668070f2f2e519d08c89267a346ac60

    • SHA256

      630b9cbaff656f49fadb0cce0ff081ddb136f2d888c26955af57170e4d7b5989

    • SHA512

      04d89b00b921676a190994affe0ae6e97d1934187b308cd3d2ce58dd957b3f21d7bca21495ceb186cf49d5a4b24e5c9ec02c1ba6a0f5377b06ba8afb9ea4be91

    • SSDEEP

      3072:2R69Eel415kYE3eDd1AZoUBW3FJeRuaWNXmgu+tAcrbFAJc+RsUi1aVDkOvhJjvc:MTnE3MdWZHEFJ7aWN1rtMsQBOSGaF+

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks