General

  • Target

    ea4dc8181d1801baf0b105504d848c70_NeikiAnalytics.exe

  • Size

    362KB

  • Sample

    240531-x1g45sab8z

  • MD5

    ea4dc8181d1801baf0b105504d848c70

  • SHA1

    cd937d3ecf66f5fa55d735890ad1f93527833ab6

  • SHA256

    bae47e5e55f32287370573e32e81ae211023f2bcdc6c9b17d89e3db1833cacfd

  • SHA512

    b1543f13c18ee62bd121509d6eb69491d96c99af10ff68eb2f9a7b5ae8e159f0681454cf98122101a8207907731403a5e6940dcb3c0b367a30b9a921f74da8bb

  • SSDEEP

    6144:eAVo3xB2z2PzxtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuF:mby2PNtmuMtrQ07nGWxWSsmiMyh95r5z

Malware Config

Targets

    • Target

      ea4dc8181d1801baf0b105504d848c70_NeikiAnalytics.exe

    • Size

      362KB

    • MD5

      ea4dc8181d1801baf0b105504d848c70

    • SHA1

      cd937d3ecf66f5fa55d735890ad1f93527833ab6

    • SHA256

      bae47e5e55f32287370573e32e81ae211023f2bcdc6c9b17d89e3db1833cacfd

    • SHA512

      b1543f13c18ee62bd121509d6eb69491d96c99af10ff68eb2f9a7b5ae8e159f0681454cf98122101a8207907731403a5e6940dcb3c0b367a30b9a921f74da8bb

    • SSDEEP

      6144:eAVo3xB2z2PzxtGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuF:mby2PNtmuMtrQ07nGWxWSsmiMyh95r5z

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks