Resubmissions

02-06-2024 03:46

240602-ebmn8ahg9y 10

02-06-2024 03:44

240602-earlsahg7s 10

02-06-2024 03:41

240602-d8s2tshf81 10

General

  • Target

    305b9cc3e0fcc6cf8b3cbb37d405fe50_NeikiAnalytics.exe

  • Size

    226KB

  • Sample

    240602-d8s2tshf81

  • MD5

    305b9cc3e0fcc6cf8b3cbb37d405fe50

  • SHA1

    22ce243c09482c01f220b837ca2cb06cf321427c

  • SHA256

    cec874dce92a056c7d8e63e725bd508190d49ae1745e07f0817398ccd495b04d

  • SHA512

    ba84e8074a80982080a7453b7cf337e385c0aa8eece753be3c2738c3dd9c10f1b3d40689a5da8e51df8b00c998817e2c36b52e0aba32a52428f161c68389946c

  • SSDEEP

    6144:CgulzKYnBjs0UUkUUUUUUUUUUUUUUOUUUUUUUWUUUUUXAjXfxqySSKpRmSKeTk7p:OlWySG5IKrEAlnLAg

Malware Config

Targets

    • Target

      305b9cc3e0fcc6cf8b3cbb37d405fe50_NeikiAnalytics.exe

    • Size

      226KB

    • MD5

      305b9cc3e0fcc6cf8b3cbb37d405fe50

    • SHA1

      22ce243c09482c01f220b837ca2cb06cf321427c

    • SHA256

      cec874dce92a056c7d8e63e725bd508190d49ae1745e07f0817398ccd495b04d

    • SHA512

      ba84e8074a80982080a7453b7cf337e385c0aa8eece753be3c2738c3dd9c10f1b3d40689a5da8e51df8b00c998817e2c36b52e0aba32a52428f161c68389946c

    • SSDEEP

      6144:CgulzKYnBjs0UUkUUUUUUUUUUUUUUOUUUUUUUWUUUUUXAjXfxqySSKpRmSKeTk7p:OlWySG5IKrEAlnLAg

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks