General

  • Target

    1e02fe409362c6218766e52461ece8c0_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240530-plsy4agg7x

  • MD5

    1e02fe409362c6218766e52461ece8c0

  • SHA1

    d1485687636ef1081f40733c776d87913199f37b

  • SHA256

    4932fce3c2ab01992c57e1df0dd3fa0f7d0f51dcc74d2bbc5f9da9b36af7452f

  • SHA512

    241a7fc3047690072a0bf56aa05c5cc58d333a65a17223571a33982c81630fbdb867d88adaa98aae20d348ea9c5eca1ba594737789cb3bc73b1b9d45cdbd2628

  • SSDEEP

    1536:FFqs2e/XyesW9cfURF0LoXB92LiaIZTJ+7LhkiB0MPiKeEAgv:FF/2WmLq4iaMU7uihJ5v

Malware Config

Targets

    • Target

      1e02fe409362c6218766e52461ece8c0_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      1e02fe409362c6218766e52461ece8c0

    • SHA1

      d1485687636ef1081f40733c776d87913199f37b

    • SHA256

      4932fce3c2ab01992c57e1df0dd3fa0f7d0f51dcc74d2bbc5f9da9b36af7452f

    • SHA512

      241a7fc3047690072a0bf56aa05c5cc58d333a65a17223571a33982c81630fbdb867d88adaa98aae20d348ea9c5eca1ba594737789cb3bc73b1b9d45cdbd2628

    • SSDEEP

      1536:FFqs2e/XyesW9cfURF0LoXB92LiaIZTJ+7LhkiB0MPiKeEAgv:FF/2WmLq4iaMU7uihJ5v

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks