General

  • Target

    ef46e75e97be34bee94373ec2be86010_NeikiAnalytics.exe

  • Size

    135KB

  • Sample

    240531-x9aresbd58

  • MD5

    ef46e75e97be34bee94373ec2be86010

  • SHA1

    973d58cffda7dc73d7d0d1da639ccf9c9ba2ce0e

  • SHA256

    d485e802b3916b6c092b8398d461d634f35a54387c8544772b71d230c0a35880

  • SHA512

    d22cbf4a0dd12f6d19f5e1a78e3b56bd6aaa198128db6a1152539a9169e5db92ff6d16da02a695a3adadbd034cc5542066b4607a3e96bc50066c439c4f370ed2

  • SSDEEP

    3072:kCoOcEdz8fBskiXGxRPTTK8Qr5+ViKGe7Yfs0a0Uoi:n4fBski2fPTTK9cViK4fs0l

Malware Config

Targets

    • Target

      ef46e75e97be34bee94373ec2be86010_NeikiAnalytics.exe

    • Size

      135KB

    • MD5

      ef46e75e97be34bee94373ec2be86010

    • SHA1

      973d58cffda7dc73d7d0d1da639ccf9c9ba2ce0e

    • SHA256

      d485e802b3916b6c092b8398d461d634f35a54387c8544772b71d230c0a35880

    • SHA512

      d22cbf4a0dd12f6d19f5e1a78e3b56bd6aaa198128db6a1152539a9169e5db92ff6d16da02a695a3adadbd034cc5542066b4607a3e96bc50066c439c4f370ed2

    • SSDEEP

      3072:kCoOcEdz8fBskiXGxRPTTK8Qr5+ViKGe7Yfs0a0Uoi:n4fBski2fPTTK9cViK4fs0l

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks