General

  • Target

    8695f650638a0e480fa8037a7001f240_NeikiAnalytics.exe

  • Size

    548KB

  • Sample

    240601-a1pgwscc33

  • MD5

    8695f650638a0e480fa8037a7001f240

  • SHA1

    7f595daccfac76ad9b940db268a9352d37101dd9

  • SHA256

    2236ae43ea68c018683546e5f931e2d8f9e0f793a6798246f5cb9dc1524ee36f

  • SHA512

    f27b0f10b543ec638610b4f606d27570a13f124a82896c9611e936c0dde16ff6b8b1a46f3b8f521ea1bebd2c87cc6d40aaf1cc8447f370fdea5b50539379bb9b

  • SSDEEP

    12288:xbvq6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+C8lM1:xmq5htaSHFaZRBEYyqmaf2qwiHPKgRCW

Malware Config

Targets

    • Target

      8695f650638a0e480fa8037a7001f240_NeikiAnalytics.exe

    • Size

      548KB

    • MD5

      8695f650638a0e480fa8037a7001f240

    • SHA1

      7f595daccfac76ad9b940db268a9352d37101dd9

    • SHA256

      2236ae43ea68c018683546e5f931e2d8f9e0f793a6798246f5cb9dc1524ee36f

    • SHA512

      f27b0f10b543ec638610b4f606d27570a13f124a82896c9611e936c0dde16ff6b8b1a46f3b8f521ea1bebd2c87cc6d40aaf1cc8447f370fdea5b50539379bb9b

    • SSDEEP

      12288:xbvq6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+C8lM1:xmq5htaSHFaZRBEYyqmaf2qwiHPKgRCW

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks