General

  • Target

    f93df7c4e51fd57c86e9dcdc7b58a880_NeikiAnalytics.exe

  • Size

    109KB

  • Sample

    240601-pdv4gsca8x

  • MD5

    f93df7c4e51fd57c86e9dcdc7b58a880

  • SHA1

    e3b05c9d1733b8c54816d02268eeec12a35004de

  • SHA256

    e4369795dedef222bbb7e8b06421835563c2aad5fd11bf90564a9748524ca8e8

  • SHA512

    ef517d7ab1bcd1bfaba572e39e9d1ac832b3bbe207d8f293bc6d2dfa3a86280f1a9c5dd9c3a153bde10778cc8e740af268bde3f82d6e44fc27054457df831b9b

  • SSDEEP

    3072:GrXIMj2FDq+m8CBt8lJ9fLCqwzBu1DjHLMVDqqkSp:4FM3m6J9Twtu1DjrFqh

Malware Config

Targets

    • Target

      f93df7c4e51fd57c86e9dcdc7b58a880_NeikiAnalytics.exe

    • Size

      109KB

    • MD5

      f93df7c4e51fd57c86e9dcdc7b58a880

    • SHA1

      e3b05c9d1733b8c54816d02268eeec12a35004de

    • SHA256

      e4369795dedef222bbb7e8b06421835563c2aad5fd11bf90564a9748524ca8e8

    • SHA512

      ef517d7ab1bcd1bfaba572e39e9d1ac832b3bbe207d8f293bc6d2dfa3a86280f1a9c5dd9c3a153bde10778cc8e740af268bde3f82d6e44fc27054457df831b9b

    • SSDEEP

      3072:GrXIMj2FDq+m8CBt8lJ9fLCqwzBu1DjHLMVDqqkSp:4FM3m6J9Twtu1DjrFqh

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks