General

  • Target

    0493099162129464bd74def282630610_NeikiAnalytics.exe

  • Size

    378KB

  • Sample

    240531-yn56waca77

  • MD5

    0493099162129464bd74def282630610

  • SHA1

    564fe54836790520b9fd6ba4e7d5cff706ee5b8a

  • SHA256

    96999ad7c1c1be46301f5faa2206c0310fb649c69c26ca5fa159639f308a3968

  • SHA512

    dd3518d04ca7d438d616628d10ac117e5a16638cdfccd4f30dd3a01d92685ecaa42141fa60e927c39bd70541d41938c9fb606b6409f46f4e3beb637633466e6d

  • SSDEEP

    6144:aj9m0+prtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0lLn+CV:hnRMsEat9pG4l+0K7WHT91M52vVAMq5U

Malware Config

Targets

    • Target

      0493099162129464bd74def282630610_NeikiAnalytics.exe

    • Size

      378KB

    • MD5

      0493099162129464bd74def282630610

    • SHA1

      564fe54836790520b9fd6ba4e7d5cff706ee5b8a

    • SHA256

      96999ad7c1c1be46301f5faa2206c0310fb649c69c26ca5fa159639f308a3968

    • SHA512

      dd3518d04ca7d438d616628d10ac117e5a16638cdfccd4f30dd3a01d92685ecaa42141fa60e927c39bd70541d41938c9fb606b6409f46f4e3beb637633466e6d

    • SSDEEP

      6144:aj9m0+prtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0lLn+CV:hnRMsEat9pG4l+0K7WHT91M52vVAMq5U

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks