General

  • Target

    10977e5ab3a62dbbd59f3d8956987350_NeikiAnalytics.exe

  • Size

    305KB

  • Sample

    240601-m1qq6sbd56

  • MD5

    10977e5ab3a62dbbd59f3d8956987350

  • SHA1

    d80a3fe3b4170b31a1ed4642cfb73b270e4ed744

  • SHA256

    bd5b8f0de77cba7af82e4bd9594aa98d2c6f377a428bf638a9a2a5dcc6f80e70

  • SHA512

    5c5b433038de4e07a46f686f44d62c1ebbce6ea5f64b5143a82b07e60c29d6dc706e1a954b348fe6360631eca7c5320b3ea38618630ae9faed693c7bea004e8c

  • SSDEEP

    6144:2WHDz5CKvE4s5fV75lAjiENxunXe8yhrtMsQBvli+RQFdq:l1Z82vAO8qRMsrOQF

Malware Config

Targets

    • Target

      10977e5ab3a62dbbd59f3d8956987350_NeikiAnalytics.exe

    • Size

      305KB

    • MD5

      10977e5ab3a62dbbd59f3d8956987350

    • SHA1

      d80a3fe3b4170b31a1ed4642cfb73b270e4ed744

    • SHA256

      bd5b8f0de77cba7af82e4bd9594aa98d2c6f377a428bf638a9a2a5dcc6f80e70

    • SHA512

      5c5b433038de4e07a46f686f44d62c1ebbce6ea5f64b5143a82b07e60c29d6dc706e1a954b348fe6360631eca7c5320b3ea38618630ae9faed693c7bea004e8c

    • SSDEEP

      6144:2WHDz5CKvE4s5fV75lAjiENxunXe8yhrtMsQBvli+RQFdq:l1Z82vAO8qRMsrOQF

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks