General

  • Target

    aa27740a8822200fc3c1a9f472b06fc0_NeikiAnalytics.exe

  • Size

    113KB

  • Sample

    240531-tat48sdb3w

  • MD5

    aa27740a8822200fc3c1a9f472b06fc0

  • SHA1

    28acad21dcffce620bd4b5680c2c9dd44a5727eb

  • SHA256

    0cd43ec5eb22b331c0c209425d4d285c8e88f1ef5d4c4b3ed6707871b485501d

  • SHA512

    77ce2638dedf350891512c94ca006160246c7bd1463df4c78e8ae83c74b24414f98903beb81fa73f9e8ded1eac9c7e127637e28f16f2d5db49d58fb1c1443579

  • SSDEEP

    3072:x0cadjUr2DJg0YkAU4xo8g0YsQkIcAU4MwEo8g0YsQkIcAU4MwEo8g0YsQkIc4Mm:x0ca9g0YkAU4xo8g0YsQkIcAU4MwEo8a

Malware Config

Targets

    • Target

      aa27740a8822200fc3c1a9f472b06fc0_NeikiAnalytics.exe

    • Size

      113KB

    • MD5

      aa27740a8822200fc3c1a9f472b06fc0

    • SHA1

      28acad21dcffce620bd4b5680c2c9dd44a5727eb

    • SHA256

      0cd43ec5eb22b331c0c209425d4d285c8e88f1ef5d4c4b3ed6707871b485501d

    • SHA512

      77ce2638dedf350891512c94ca006160246c7bd1463df4c78e8ae83c74b24414f98903beb81fa73f9e8ded1eac9c7e127637e28f16f2d5db49d58fb1c1443579

    • SSDEEP

      3072:x0cadjUr2DJg0YkAU4xo8g0YsQkIcAU4MwEo8g0YsQkIcAU4MwEo8g0YsQkIc4Mm:x0ca9g0YkAU4xo8g0YsQkIcAU4MwEo8a

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks