General

  • Target

    19f91a4dd98127b9c171a80b8a0d66f0_NeikiAnalytics.exe

  • Size

    305KB

  • Sample

    240531-sg4ftacg28

  • MD5

    19f91a4dd98127b9c171a80b8a0d66f0

  • SHA1

    e40bbbf9af0ec095e6a847a58e3bc23ca4c80b29

  • SHA256

    5a551f83f61b4f096e57a0c8c9b3fcd6ca7608b6e8a99cf8de5d943ed9e3277d

  • SHA512

    da7bd72ccca66687a3e3d92e547df3b3f958becfe90700238d64b32143cadab43c5dca8af50ebc4e76bf8e90396d145a399c4c0cb4e8499c9f4d42139b0bf23f

  • SSDEEP

    6144:zX8EjQiRoqZeUvNxunXe8yhrtMsQBvli+RQFdq:A2QLIvAO8qRMsrOQF

Malware Config

Targets

    • Target

      19f91a4dd98127b9c171a80b8a0d66f0_NeikiAnalytics.exe

    • Size

      305KB

    • MD5

      19f91a4dd98127b9c171a80b8a0d66f0

    • SHA1

      e40bbbf9af0ec095e6a847a58e3bc23ca4c80b29

    • SHA256

      5a551f83f61b4f096e57a0c8c9b3fcd6ca7608b6e8a99cf8de5d943ed9e3277d

    • SHA512

      da7bd72ccca66687a3e3d92e547df3b3f958becfe90700238d64b32143cadab43c5dca8af50ebc4e76bf8e90396d145a399c4c0cb4e8499c9f4d42139b0bf23f

    • SSDEEP

      6144:zX8EjQiRoqZeUvNxunXe8yhrtMsQBvli+RQFdq:A2QLIvAO8qRMsrOQF

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks