General

  • Target

    cd0b3d8c1902246acc6938b78f8b9360_NeikiAnalytics.exe

  • Size

    320KB

  • Sample

    240530-nspdtagh39

  • MD5

    cd0b3d8c1902246acc6938b78f8b9360

  • SHA1

    d9db739b1dd9a975d1437a9c381c50f042b1e8f4

  • SHA256

    572c99ca48010a5f19da9ca881091c205fb3be39a2f770a5736bd81836bce402

  • SHA512

    f3a2153152440aeb52eea275ace7466ba53faa32a5246b57ba96d96a39a98529c446a7ec244bb9fbeba3d64989e7bc7c26d88d84d8919f5a8cb9be699493f967

  • SSDEEP

    6144:hqUE9AX8WrCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSqHB8oF8KdBT:hqUE9ATFHRFbe5qfF8KfT

Malware Config

Targets

    • Target

      cd0b3d8c1902246acc6938b78f8b9360_NeikiAnalytics.exe

    • Size

      320KB

    • MD5

      cd0b3d8c1902246acc6938b78f8b9360

    • SHA1

      d9db739b1dd9a975d1437a9c381c50f042b1e8f4

    • SHA256

      572c99ca48010a5f19da9ca881091c205fb3be39a2f770a5736bd81836bce402

    • SHA512

      f3a2153152440aeb52eea275ace7466ba53faa32a5246b57ba96d96a39a98529c446a7ec244bb9fbeba3d64989e7bc7c26d88d84d8919f5a8cb9be699493f967

    • SSDEEP

      6144:hqUE9AX8WrCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSqHB8oF8KdBT:hqUE9ATFHRFbe5qfF8KfT

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks