General

  • Target

    f806ed473fcbfbec06a04dac247d7c40_NeikiAnalytics.exe

  • Size

    109KB

  • Sample

    240531-s41y7sch4w

  • MD5

    f806ed473fcbfbec06a04dac247d7c40

  • SHA1

    26478c188da816d4740b413bd8b754e551a7c17c

  • SHA256

    a3e49f04d5fc873ca2b94bdc98f0e9dec6ceb420c983f8e582cf56297f5efa18

  • SHA512

    e039ee026ad591098921e1497c83bd7901b2c9936da825705a876f00e80f7bbb413032691fc442c9ccec04e7ff872520bfba42e995f2ba7e1d252531ca6e5f23

  • SSDEEP

    3072:LtybiyQQUymCmxQVJ9ULCqwzBu1DjHLMVDqqkSpR:yADCm+VJ98wtu1DjrFqhz

Malware Config

Targets

    • Target

      f806ed473fcbfbec06a04dac247d7c40_NeikiAnalytics.exe

    • Size

      109KB

    • MD5

      f806ed473fcbfbec06a04dac247d7c40

    • SHA1

      26478c188da816d4740b413bd8b754e551a7c17c

    • SHA256

      a3e49f04d5fc873ca2b94bdc98f0e9dec6ceb420c983f8e582cf56297f5efa18

    • SHA512

      e039ee026ad591098921e1497c83bd7901b2c9936da825705a876f00e80f7bbb413032691fc442c9ccec04e7ff872520bfba42e995f2ba7e1d252531ca6e5f23

    • SSDEEP

      3072:LtybiyQQUymCmxQVJ9ULCqwzBu1DjHLMVDqqkSpR:yADCm+VJ98wtu1DjrFqhz

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks