General

  • Target

    c81804a5df20e81a9b0248c40220fb60_NeikiAnalytics.exe

  • Size

    456KB

  • Sample

    240601-pdsncsch39

  • MD5

    c81804a5df20e81a9b0248c40220fb60

  • SHA1

    cdccb5e4844e1da26cfd087ebbb01bd92682b847

  • SHA256

    718e70821edc5f820ae9ecd7dd194e0e9a568d8b93a8707b6487e5d7591a5353

  • SHA512

    9fdb5d3c3a1f3225db3e371d62267833b3d6575fa4678caaf62370cf6997a2cddd2798258ac8df4e4852b3200af6ee54a8ca32dc22fdd3b512e56361000c0765

  • SSDEEP

    12288:MvwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:MvwFfDy/phgeczlqczZd7LFB3oFHoGn+

Malware Config

Targets

    • Target

      c81804a5df20e81a9b0248c40220fb60_NeikiAnalytics.exe

    • Size

      456KB

    • MD5

      c81804a5df20e81a9b0248c40220fb60

    • SHA1

      cdccb5e4844e1da26cfd087ebbb01bd92682b847

    • SHA256

      718e70821edc5f820ae9ecd7dd194e0e9a568d8b93a8707b6487e5d7591a5353

    • SHA512

      9fdb5d3c3a1f3225db3e371d62267833b3d6575fa4678caaf62370cf6997a2cddd2798258ac8df4e4852b3200af6ee54a8ca32dc22fdd3b512e56361000c0765

    • SSDEEP

      12288:MvwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:MvwFfDy/phgeczlqczZd7LFB3oFHoGn+

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks