General

  • Target

    52308e465012a16f445cc9df8cd45040_NeikiAnalytics.exe

  • Size

    352KB

  • Sample

    240530-pza1faab53

  • MD5

    52308e465012a16f445cc9df8cd45040

  • SHA1

    b498cc02af2f119e5b58aac6a419ebfc9d4b865c

  • SHA256

    9e189d5fe299bfb749eda56a91b4367dc7f7f25fe1d3ca8865a930371cbe6cbd

  • SHA512

    4d95888a6f80e7d82acd7f1ec7ec0374027732b0b5ed10991750285b5a6b7b3e0650b3a013a424a7bb146ba9b914f48379796d4630e9f221abe4dd727491ec40

  • SSDEEP

    6144:k/TgHZxA60pr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFf520:MgwnrCZYE6YYBHpd0uD319ZvSntnhp3X

Malware Config

Targets

    • Target

      52308e465012a16f445cc9df8cd45040_NeikiAnalytics.exe

    • Size

      352KB

    • MD5

      52308e465012a16f445cc9df8cd45040

    • SHA1

      b498cc02af2f119e5b58aac6a419ebfc9d4b865c

    • SHA256

      9e189d5fe299bfb749eda56a91b4367dc7f7f25fe1d3ca8865a930371cbe6cbd

    • SHA512

      4d95888a6f80e7d82acd7f1ec7ec0374027732b0b5ed10991750285b5a6b7b3e0650b3a013a424a7bb146ba9b914f48379796d4630e9f221abe4dd727491ec40

    • SSDEEP

      6144:k/TgHZxA60pr1ItvLUErOU7amYBAYpd0ucyEWJrj1mKZHPSv/rpwMBhpNFdFf520:MgwnrCZYE6YYBHpd0uD319ZvSntnhp3X

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks