General

  • Target

    8c722c93bb78f1fe2812993dea9b1380_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240601-efz54sha8v

  • MD5

    8c722c93bb78f1fe2812993dea9b1380

  • SHA1

    8d08f6b780d8348e8d95a4c361faeca6a13ab5a5

  • SHA256

    25f741d19924254c8f7cb9f6b48246cc16e251eaec1036cfebb99dd24af9a902

  • SHA512

    25f853a8e1e1a40840f68c7867b96bffac5dd2522b6cbdd3a1a04c154696a0b77c556dca4ae5add761098463709bf3649bf02d26cce984f7c06c37d6dba2ddb4

  • SSDEEP

    1536:F0haIHIh0aw2QPFa32QjD92LbaIZTJ+7LhkiB0MPiKeEAgv:cHIKaw2kkGaObaMU7uihJ5v

Malware Config

Targets

    • Target

      8c722c93bb78f1fe2812993dea9b1380_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      8c722c93bb78f1fe2812993dea9b1380

    • SHA1

      8d08f6b780d8348e8d95a4c361faeca6a13ab5a5

    • SHA256

      25f741d19924254c8f7cb9f6b48246cc16e251eaec1036cfebb99dd24af9a902

    • SHA512

      25f853a8e1e1a40840f68c7867b96bffac5dd2522b6cbdd3a1a04c154696a0b77c556dca4ae5add761098463709bf3649bf02d26cce984f7c06c37d6dba2ddb4

    • SSDEEP

      1536:F0haIHIh0aw2QPFa32QjD92LbaIZTJ+7LhkiB0MPiKeEAgv:cHIKaw2kkGaObaMU7uihJ5v

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks