General

  • Target

    e3139212a5bdff11fb7f30de47c02be0_NeikiAnalytics.exe

  • Size

    329KB

  • Sample

    240601-rfqynaec9s

  • MD5

    e3139212a5bdff11fb7f30de47c02be0

  • SHA1

    1fd2b68354d7eddaf89d7dfc7a2640da9d9b1e8b

  • SHA256

    3dd7b2918b0b361fc2c642ab4ffcd53372bf65bebafb118cec220f7295959b04

  • SHA512

    a912220883a898d2baffd54cccd25cc1b9036e910ed3263db369155ea9ff77ec09de71b0d6624ab2e3a4995d4de2a43465334816b656abb5fffc3f7630ca0bb9

  • SSDEEP

    6144:nuF9W8dws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:C9Wv7LKQweY0sam38vZwIBIE1+J3pQtI

Malware Config

Targets

    • Target

      e3139212a5bdff11fb7f30de47c02be0_NeikiAnalytics.exe

    • Size

      329KB

    • MD5

      e3139212a5bdff11fb7f30de47c02be0

    • SHA1

      1fd2b68354d7eddaf89d7dfc7a2640da9d9b1e8b

    • SHA256

      3dd7b2918b0b361fc2c642ab4ffcd53372bf65bebafb118cec220f7295959b04

    • SHA512

      a912220883a898d2baffd54cccd25cc1b9036e910ed3263db369155ea9ff77ec09de71b0d6624ab2e3a4995d4de2a43465334816b656abb5fffc3f7630ca0bb9

    • SSDEEP

      6144:nuF9W8dws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:C9Wv7LKQweY0sam38vZwIBIE1+J3pQtI

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks