General

  • Target

    a2b22503aba01a20b31103a05e74bdb0_NeikiAnalytics.exe

  • Size

    548KB

  • Sample

    240530-pa9gpsgf2v

  • MD5

    a2b22503aba01a20b31103a05e74bdb0

  • SHA1

    3647af950b7d73c5c16d07fd43212ff33c5c2d25

  • SHA256

    da36b418609d3ad76e08086553896b093b2741cf539514c4b87907e1a5ef0203

  • SHA512

    64401e01f211c0bf2ebe6ab8aae2005420a6af00972e898934ba3505e7dd6834356757698d2136dac37ff445301d692da88eca75ba5b051903e0b9ff140c360d

  • SSDEEP

    12288:QQjvF6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+C8lM1:dJq5htaSHFaZRBEYyqmaf2qwiHPKgRCW

Malware Config

Targets

    • Target

      a2b22503aba01a20b31103a05e74bdb0_NeikiAnalytics.exe

    • Size

      548KB

    • MD5

      a2b22503aba01a20b31103a05e74bdb0

    • SHA1

      3647af950b7d73c5c16d07fd43212ff33c5c2d25

    • SHA256

      da36b418609d3ad76e08086553896b093b2741cf539514c4b87907e1a5ef0203

    • SHA512

      64401e01f211c0bf2ebe6ab8aae2005420a6af00972e898934ba3505e7dd6834356757698d2136dac37ff445301d692da88eca75ba5b051903e0b9ff140c360d

    • SSDEEP

      12288:QQjvF6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+C8lM1:dJq5htaSHFaZRBEYyqmaf2qwiHPKgRCW

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks