General

  • Target

    8ae1a7c8ed33a8d33e91c833def77090_NeikiAnalytics.exe

  • Size

    89KB

  • Sample

    240601-dft4esfe4s

  • MD5

    8ae1a7c8ed33a8d33e91c833def77090

  • SHA1

    f32589a47fb165fd4a180419e485ea4c168b54be

  • SHA256

    5c43664a3c9b2d7297c3cef2642891db95309b1d226176b012f841acb4615666

  • SHA512

    d7289bd929d85da089c8395dde3abb154ebbfc5036939ea35c8400ced701cb3535affbadd027a965c4c2d9f7d4f451512f3b3eb50eda42ec8a2ff5b8a95dd36e

  • SSDEEP

    1536:lZj1N8F+LfhbvzmC/jlcJrLD8ljjLds/bjgy9QRQYyD68a+VMKKTRVGFtUhQfR1p:PYFgf1lWD8V3dsTIeqr4MKy3G7UEqMM6

Malware Config

Targets

    • Target

      8ae1a7c8ed33a8d33e91c833def77090_NeikiAnalytics.exe

    • Size

      89KB

    • MD5

      8ae1a7c8ed33a8d33e91c833def77090

    • SHA1

      f32589a47fb165fd4a180419e485ea4c168b54be

    • SHA256

      5c43664a3c9b2d7297c3cef2642891db95309b1d226176b012f841acb4615666

    • SHA512

      d7289bd929d85da089c8395dde3abb154ebbfc5036939ea35c8400ced701cb3535affbadd027a965c4c2d9f7d4f451512f3b3eb50eda42ec8a2ff5b8a95dd36e

    • SSDEEP

      1536:lZj1N8F+LfhbvzmC/jlcJrLD8ljjLds/bjgy9QRQYyD68a+VMKKTRVGFtUhQfR1p:PYFgf1lWD8V3dsTIeqr4MKy3G7UEqMM6

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks