General

  • Target

    ca03aec03e36581e35ed77ba979127d0_NeikiAnalytics.exe

  • Size

    749KB

  • Sample

    240601-qme93aeb35

  • MD5

    ca03aec03e36581e35ed77ba979127d0

  • SHA1

    9d7b1fc2cd76cf32e350dbe7868a3ca8b6da8646

  • SHA256

    ee6faa6fb423a5ff80290a676d19d54ed57f0231314c1ba2d28092246a7f3901

  • SHA512

    64b5e27362275b6bee31dd15ce7fb9f0d9e2260f1ce186b96f8142b37b6e6f593f52e88f8310bfdb19eb3827fc61562408e2b65367dede7590d458ab617a8cc0

  • SSDEEP

    12288:pYIW0p98Oh8P7h8cgLdKK5/O40tETuNLlgjOETn4/5BWpUohOqnDMsMbol/XPRsM:dW298E8ubdpmEaNLlgjOETn4/5BWpUoV

Malware Config

Targets

    • Target

      ca03aec03e36581e35ed77ba979127d0_NeikiAnalytics.exe

    • Size

      749KB

    • MD5

      ca03aec03e36581e35ed77ba979127d0

    • SHA1

      9d7b1fc2cd76cf32e350dbe7868a3ca8b6da8646

    • SHA256

      ee6faa6fb423a5ff80290a676d19d54ed57f0231314c1ba2d28092246a7f3901

    • SHA512

      64b5e27362275b6bee31dd15ce7fb9f0d9e2260f1ce186b96f8142b37b6e6f593f52e88f8310bfdb19eb3827fc61562408e2b65367dede7590d458ab617a8cc0

    • SSDEEP

      12288:pYIW0p98Oh8P7h8cgLdKK5/O40tETuNLlgjOETn4/5BWpUohOqnDMsMbol/XPRsM:dW298E8ubdpmEaNLlgjOETn4/5BWpUoV

    Score
    10/10
    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks