General

  • Target

    3808ddf1a07be265e710757bd5085f50_NeikiAnalytics.exe

  • Size

    227KB

  • Sample

    240601-l9cp8sae75

  • MD5

    3808ddf1a07be265e710757bd5085f50

  • SHA1

    d8c108778c32b4e7d2408d91b07004bb5177652e

  • SHA256

    2cbc823c29892dfc33142129bb70d34a2e410042c98250a37d35972e5c7a6205

  • SHA512

    7966900778724444080cff8343075f4fd3d3d43db1a59faf22c165c1464d953ccb54ecb14976f9648499211acb0b5fd2f7077a4e20d8cfab8a53b89ffbf548f8

  • SSDEEP

    6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtE:jvw68XS8+d8HamysaZHRD44M3ZzF/GeO

Malware Config

Targets

    • Target

      3808ddf1a07be265e710757bd5085f50_NeikiAnalytics.exe

    • Size

      227KB

    • MD5

      3808ddf1a07be265e710757bd5085f50

    • SHA1

      d8c108778c32b4e7d2408d91b07004bb5177652e

    • SHA256

      2cbc823c29892dfc33142129bb70d34a2e410042c98250a37d35972e5c7a6205

    • SHA512

      7966900778724444080cff8343075f4fd3d3d43db1a59faf22c165c1464d953ccb54ecb14976f9648499211acb0b5fd2f7077a4e20d8cfab8a53b89ffbf548f8

    • SSDEEP

      6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtE:jvw68XS8+d8HamysaZHRD44M3ZzF/GeO

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Modifies visibility of file extensions in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks