General

  • Target

    cc1eb96fad0b88d254795a618c2c83e0_NeikiAnalytics.exe

  • Size

    89KB

  • Sample

    240531-sgzsmacb4x

  • MD5

    cc1eb96fad0b88d254795a618c2c83e0

  • SHA1

    5ffa5c59c552d6840f051dfd8cafd5675938396d

  • SHA256

    ddc6352f3879406a007759705411fe88ac452c872f30d654674b069774050107

  • SHA512

    d0e960de05478d03cc6961a9487cb4810cdd290db9c811baddd60b256ac7f2ebac81a4379e243fcb3c84d65efa598b302b341fbd91024b07d50ba9462f6c8cba

  • SSDEEP

    1536:aG4IJH06Sd9bKE/z33zP04CGiToKoaIj2WRQmD68a+VMKKTRVGFtUhQfR1WRaROu:aGDHcdIq3D5iocgePr4MKy3G7UEqMM6

Malware Config

Targets

    • Target

      cc1eb96fad0b88d254795a618c2c83e0_NeikiAnalytics.exe

    • Size

      89KB

    • MD5

      cc1eb96fad0b88d254795a618c2c83e0

    • SHA1

      5ffa5c59c552d6840f051dfd8cafd5675938396d

    • SHA256

      ddc6352f3879406a007759705411fe88ac452c872f30d654674b069774050107

    • SHA512

      d0e960de05478d03cc6961a9487cb4810cdd290db9c811baddd60b256ac7f2ebac81a4379e243fcb3c84d65efa598b302b341fbd91024b07d50ba9462f6c8cba

    • SSDEEP

      1536:aG4IJH06Sd9bKE/z33zP04CGiToKoaIj2WRQmD68a+VMKKTRVGFtUhQfR1WRaROu:aGDHcdIq3D5iocgePr4MKy3G7UEqMM6

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks