General

  • Target

    8863ddda597e590cebbbb43bdb28b1a0_NeikiAnalytics.exe

  • Size

    1024KB

  • Sample

    240601-bzvsysdb5v

  • MD5

    8863ddda597e590cebbbb43bdb28b1a0

  • SHA1

    b23b225d2f9a817e9192372fecca542b2efb81d0

  • SHA256

    b5788f6c475990626b34fd0e3a4a07bcbcc2befc1f0c9e045d13bc395c44d646

  • SHA512

    6a7b07eac0c120b6372c3975c393293910f15f7af8c1bb176c0a3d4f748eff748bad40a0014cac3fda5aa811be12f739315464195fe6857901d5d604885fec6f

  • SSDEEP

    24576:nItaSHFaZRBEYyqmaf2qwiHPKgRC4gvGZl6snARe:+aSHFaZRBEYyqmS2DiHPKQgmN

Malware Config

Targets

    • Target

      8863ddda597e590cebbbb43bdb28b1a0_NeikiAnalytics.exe

    • Size

      1024KB

    • MD5

      8863ddda597e590cebbbb43bdb28b1a0

    • SHA1

      b23b225d2f9a817e9192372fecca542b2efb81d0

    • SHA256

      b5788f6c475990626b34fd0e3a4a07bcbcc2befc1f0c9e045d13bc395c44d646

    • SHA512

      6a7b07eac0c120b6372c3975c393293910f15f7af8c1bb176c0a3d4f748eff748bad40a0014cac3fda5aa811be12f739315464195fe6857901d5d604885fec6f

    • SSDEEP

      24576:nItaSHFaZRBEYyqmaf2qwiHPKgRC4gvGZl6snARe:+aSHFaZRBEYyqmS2DiHPKQgmN

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks