General

  • Target

    80650edaaed899a4b49f105908d925c0_NeikiAnalytics.exe

  • Size

    391KB

  • Sample

    240531-1bgzmaeg94

  • MD5

    80650edaaed899a4b49f105908d925c0

  • SHA1

    a67a59680adb2cff4f84c339255c8ce236d74a1b

  • SHA256

    5ab00b50f8bb10c095f69e348331e7f6d75d6d8bb6eeb837ecb6f06f2300c4fa

  • SHA512

    a2d3448a06d741610a1ac81d1eb65e4792cd44888393d5f92f7afa5e9d4a6b7a382b62768be2b63a372403985eb2c1dd22c0496f8595464a2694d024062066d3

  • SSDEEP

    12288:BvepnmT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:BveV69XvEhdfJkKSkU3kHyuaRB5t6k0F

Malware Config

Targets

    • Target

      80650edaaed899a4b49f105908d925c0_NeikiAnalytics.exe

    • Size

      391KB

    • MD5

      80650edaaed899a4b49f105908d925c0

    • SHA1

      a67a59680adb2cff4f84c339255c8ce236d74a1b

    • SHA256

      5ab00b50f8bb10c095f69e348331e7f6d75d6d8bb6eeb837ecb6f06f2300c4fa

    • SHA512

      a2d3448a06d741610a1ac81d1eb65e4792cd44888393d5f92f7afa5e9d4a6b7a382b62768be2b63a372403985eb2c1dd22c0496f8595464a2694d024062066d3

    • SSDEEP

      12288:BvepnmT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:BveV69XvEhdfJkKSkU3kHyuaRB5t6k0F

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks