General

  • Target

    2215f67b018396ad73b2291360996df0_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240601-nbvjhaah3z

  • MD5

    2215f67b018396ad73b2291360996df0

  • SHA1

    57293efa4d671ae4441c19e3be4ba76adac04604

  • SHA256

    b4a600b9fc4d12acf6113606ab1b51fe0d44e0dd1c54de96375bc4c19af8eb25

  • SHA512

    a0d21bd9e34681c7e5c87709a75062d5718e27d6dd049dfed4c5734370ba2873708d691b5dbb47349d3bd9522325831677fbf80f414d02ef1b5dd24c5a015ad9

  • SSDEEP

    6144:XlmBPm54qpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoH3ygNb/:1NhpV6yYPMLnfBJKFbhDwBpV6yYP0riN

Malware Config

Targets

    • Target

      2215f67b018396ad73b2291360996df0_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      2215f67b018396ad73b2291360996df0

    • SHA1

      57293efa4d671ae4441c19e3be4ba76adac04604

    • SHA256

      b4a600b9fc4d12acf6113606ab1b51fe0d44e0dd1c54de96375bc4c19af8eb25

    • SHA512

      a0d21bd9e34681c7e5c87709a75062d5718e27d6dd049dfed4c5734370ba2873708d691b5dbb47349d3bd9522325831677fbf80f414d02ef1b5dd24c5a015ad9

    • SSDEEP

      6144:XlmBPm54qpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoH3ygNb/:1NhpV6yYPMLnfBJKFbhDwBpV6yYP0riN

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks