General

  • Target

    2d185f271c471f4a61c22a6c7588cae0_NeikiAnalytics.exe

  • Size

    332KB

  • Sample

    240602-dwnlkshf94

  • MD5

    2d185f271c471f4a61c22a6c7588cae0

  • SHA1

    c11df4e3a6c587235b44ff03613a094915a3dc77

  • SHA256

    58df9edf6764284f87e7e7b0f9cbdece5565afe8287f42307763b684b2fb7fc1

  • SHA512

    3720c3a29024647770232bbbf77d7bd5b82ccd641cb545fe9cbd5271f4e5a0dd402827c4fb25529f2c8d875a25b1f6ea6d53af51e4205ea989f60e9a029ed1cb

  • SSDEEP

    6144:5k6OlCpmgHQboshr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyUvpQf4vt74mD50ev:lOlIVM1RFpogXnV4MlGN1AlDkvXvtxDN

Malware Config

Targets

    • Target

      2d185f271c471f4a61c22a6c7588cae0_NeikiAnalytics.exe

    • Size

      332KB

    • MD5

      2d185f271c471f4a61c22a6c7588cae0

    • SHA1

      c11df4e3a6c587235b44ff03613a094915a3dc77

    • SHA256

      58df9edf6764284f87e7e7b0f9cbdece5565afe8287f42307763b684b2fb7fc1

    • SHA512

      3720c3a29024647770232bbbf77d7bd5b82ccd641cb545fe9cbd5271f4e5a0dd402827c4fb25529f2c8d875a25b1f6ea6d53af51e4205ea989f60e9a029ed1cb

    • SSDEEP

      6144:5k6OlCpmgHQboshr1R6xie8opqXgKTpgtYOWlGmMvkqAlDiyUvpQf4vt74mD50ev:lOlIVM1RFpogXnV4MlGN1AlDkvXvtxDN

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks