General

  • Target

    163d5a43cffaf0c9d5ff08d37b0591e0_NeikiAnalytics.exe

  • Size

    224KB

  • Sample

    240601-lzrfmsac42

  • MD5

    163d5a43cffaf0c9d5ff08d37b0591e0

  • SHA1

    ed14aa330b7daf71ea486f08e50900bd9ffdd64d

  • SHA256

    bc4e6490426c7a9915676b5cd5014a2c8a8c81da87629b75ded5811fb0ae32ee

  • SHA512

    2741d13ee3a38d2c3709404db7b1fd901b217052d8de042d0cbf013a5363607257dff424cd92397dc23c792c8b05a94edc33605303357786b821ffc6f18be469

  • SSDEEP

    6144:iwLJ1+pZ/dWGnm7U5j2QE2+g24Id2jFH8:zJAZ/dWYiojj+Td2K

Malware Config

Targets

    • Target

      163d5a43cffaf0c9d5ff08d37b0591e0_NeikiAnalytics.exe

    • Size

      224KB

    • MD5

      163d5a43cffaf0c9d5ff08d37b0591e0

    • SHA1

      ed14aa330b7daf71ea486f08e50900bd9ffdd64d

    • SHA256

      bc4e6490426c7a9915676b5cd5014a2c8a8c81da87629b75ded5811fb0ae32ee

    • SHA512

      2741d13ee3a38d2c3709404db7b1fd901b217052d8de042d0cbf013a5363607257dff424cd92397dc23c792c8b05a94edc33605303357786b821ffc6f18be469

    • SSDEEP

      6144:iwLJ1+pZ/dWGnm7U5j2QE2+g24Id2jFH8:zJAZ/dWYiojj+Td2K

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks