General

  • Target

    07fb0d67be614a51bc123c2ae1d01c60_NeikiAnalytics.exe

  • Size

    356KB

  • Sample

    240531-t6slaafa24

  • MD5

    07fb0d67be614a51bc123c2ae1d01c60

  • SHA1

    90e70e021274def0cd2770b252731e1942cb88a8

  • SHA256

    203f1be482b53aabdd44cb83a4a41fa91b3cc4d0c43d83171ac36c2b18b31935

  • SHA512

    6b5580586140c433d413be824fd305c6b86528a982804ea6f1b77ec306b50dc50b3f5b3b5f8ae49fcf5f51898a1952d378bee603c2cfed6f2fb4c255b6a0c7a0

  • SSDEEP

    6144:yJAbpBDRT2le5EQpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMGz:FbpB52LQpV6yYPMLnfBJKFbhDwBpV6yp

Malware Config

Targets

    • Target

      07fb0d67be614a51bc123c2ae1d01c60_NeikiAnalytics.exe

    • Size

      356KB

    • MD5

      07fb0d67be614a51bc123c2ae1d01c60

    • SHA1

      90e70e021274def0cd2770b252731e1942cb88a8

    • SHA256

      203f1be482b53aabdd44cb83a4a41fa91b3cc4d0c43d83171ac36c2b18b31935

    • SHA512

      6b5580586140c433d413be824fd305c6b86528a982804ea6f1b77ec306b50dc50b3f5b3b5f8ae49fcf5f51898a1952d378bee603c2cfed6f2fb4c255b6a0c7a0

    • SSDEEP

      6144:yJAbpBDRT2le5EQpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMGz:FbpB52LQpV6yYPMLnfBJKFbhDwBpV6yp

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks