General

  • Target

    30a3e5172591960f2630ac2d42b65760_NeikiAnalytics.exe

  • Size

    374KB

  • Sample

    240601-npmqtabc5t

  • MD5

    30a3e5172591960f2630ac2d42b65760

  • SHA1

    f90c874c835ea9e005ec61f32a7e82a91f8d38eb

  • SHA256

    6e20ee139bbad069f38ef60acf89251c43b2d92cccb3d5229b0e2620f621f105

  • SHA512

    dd85e91829fc077b377ef714d2885c46d1252da448e18c01ffb4f043c3d346f89210aaffb785ea58ab8621ad754c4c7ae9c9cb525aae0e1db6f7ab3b94e07536

  • SSDEEP

    6144:HxGxjUmszQ+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:HxGOwE6uidyzwr6AxfLeI1Su63lgMBdQ

Malware Config

Targets

    • Target

      30a3e5172591960f2630ac2d42b65760_NeikiAnalytics.exe

    • Size

      374KB

    • MD5

      30a3e5172591960f2630ac2d42b65760

    • SHA1

      f90c874c835ea9e005ec61f32a7e82a91f8d38eb

    • SHA256

      6e20ee139bbad069f38ef60acf89251c43b2d92cccb3d5229b0e2620f621f105

    • SHA512

      dd85e91829fc077b377ef714d2885c46d1252da448e18c01ffb4f043c3d346f89210aaffb785ea58ab8621ad754c4c7ae9c9cb525aae0e1db6f7ab3b94e07536

    • SSDEEP

      6144:HxGxjUmszQ+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:HxGOwE6uidyzwr6AxfLeI1Su63lgMBdQ

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks