General

  • Target

    7df75d1ac2418f3eaeb5b0dbf926c960_NeikiAnalytics.exe

  • Size

    300KB

  • Sample

    240531-y1tnlscf29

  • MD5

    7df75d1ac2418f3eaeb5b0dbf926c960

  • SHA1

    d53a3c0ef5065926ee0e3970d9ce6a745bbbc1fc

  • SHA256

    582637d3b2f3e4831816d5cf23d3ff63a5db9f74dd64b61213c256c500a58b44

  • SHA512

    c823320caef9b5228633dde5b97a56065be6fd94b9afef037cc0a1f85f444ce72097f1ad9b2f298634f5a625351f71f6c847ad4207268be19e9f6a3a883c2c0f

  • SSDEEP

    6144:g86i/GjF9asmjewXGpqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:g86i/GjF9a9KwQymCjb87g4/c

Malware Config

Targets

    • Target

      7df75d1ac2418f3eaeb5b0dbf926c960_NeikiAnalytics.exe

    • Size

      300KB

    • MD5

      7df75d1ac2418f3eaeb5b0dbf926c960

    • SHA1

      d53a3c0ef5065926ee0e3970d9ce6a745bbbc1fc

    • SHA256

      582637d3b2f3e4831816d5cf23d3ff63a5db9f74dd64b61213c256c500a58b44

    • SHA512

      c823320caef9b5228633dde5b97a56065be6fd94b9afef037cc0a1f85f444ce72097f1ad9b2f298634f5a625351f71f6c847ad4207268be19e9f6a3a883c2c0f

    • SSDEEP

      6144:g86i/GjF9asmjewXGpqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:g86i/GjF9a9KwQymCjb87g4/c

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks