General

  • Target

    6c621d4c23961ea7898b61400a36b3f0_NeikiAnalytics.exe

  • Size

    227KB

  • Sample

    240602-1c4vsagg65

  • MD5

    6c621d4c23961ea7898b61400a36b3f0

  • SHA1

    7513391ea9f40a9e470f64a6e0b70b67d7a1e930

  • SHA256

    90e9e03ad65424d61821e6035a143062d5716da456b0628a742534f0bb6eed86

  • SHA512

    4f7f70056c325e84cc0e1ac621883b817c7fcc1ca6a8c6e8f49bbd0f370da003ac9fe61b0200a10f84d7ea18610caf1b82bc340e883404f750f02b4a2d800379

  • SSDEEP

    6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtU:jvw68XS8+d8HamysaZHRD44M3ZzF/Geu

Malware Config

Targets

    • Target

      6c621d4c23961ea7898b61400a36b3f0_NeikiAnalytics.exe

    • Size

      227KB

    • MD5

      6c621d4c23961ea7898b61400a36b3f0

    • SHA1

      7513391ea9f40a9e470f64a6e0b70b67d7a1e930

    • SHA256

      90e9e03ad65424d61821e6035a143062d5716da456b0628a742534f0bb6eed86

    • SHA512

      4f7f70056c325e84cc0e1ac621883b817c7fcc1ca6a8c6e8f49bbd0f370da003ac9fe61b0200a10f84d7ea18610caf1b82bc340e883404f750f02b4a2d800379

    • SSDEEP

      6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtU:jvw68XS8+d8HamysaZHRD44M3ZzF/Geu

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Modifies visibility of file extensions in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks