General

  • Target

    0107791d5017885df75701df9c52afa0_NeikiAnalytics.exe

  • Size

    161KB

  • Sample

    240531-rytghabe8x

  • MD5

    0107791d5017885df75701df9c52afa0

  • SHA1

    5ba7a779db960da550e9a7c6d5c9297d06cce52b

  • SHA256

    828ff6bd5b93b536715303613d318ca99409389e01d222361e7e993085db850b

  • SHA512

    36e5ac942e8a85c914690a391b22f87aea7ec6fd14bfa0e0f9736aa7d5a7e511800c8d85ee180877feece1cefc72f3b5b4312b9fa29abb68e135206d6e2784ee

  • SSDEEP

    3072:DBkX2W1yCHxYNw3HPT+0UkPVwtCJXeex7rrIRZK8K8/kv:DBkX/1yexBHPT+tkPVwtmeetrIyR

Malware Config

Targets

    • Target

      0107791d5017885df75701df9c52afa0_NeikiAnalytics.exe

    • Size

      161KB

    • MD5

      0107791d5017885df75701df9c52afa0

    • SHA1

      5ba7a779db960da550e9a7c6d5c9297d06cce52b

    • SHA256

      828ff6bd5b93b536715303613d318ca99409389e01d222361e7e993085db850b

    • SHA512

      36e5ac942e8a85c914690a391b22f87aea7ec6fd14bfa0e0f9736aa7d5a7e511800c8d85ee180877feece1cefc72f3b5b4312b9fa29abb68e135206d6e2784ee

    • SSDEEP

      3072:DBkX2W1yCHxYNw3HPT+0UkPVwtCJXeex7rrIRZK8K8/kv:DBkX/1yexBHPT+tkPVwtmeetrIyR

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks