General

  • Target

    36eb6fcb992a3297a4f04bc4eedd9740_NeikiAnalytics.exe

  • Size

    374KB

  • Sample

    240602-e37tgabe79

  • MD5

    36eb6fcb992a3297a4f04bc4eedd9740

  • SHA1

    4b6d29636971f0a27e9ec18509854a016161298a

  • SHA256

    9da6d9d8e46aec7a04f1e0b373a00f28590b69d6fbac359d90634a4318100246

  • SHA512

    e74614510fd05fcdf33351b6bac63f046e5540eb6edcaff2127ade13938ec15ff7b2497645fabd15661b5cf2407027e4c10ecc893afd97ef37cb9501f237f724

  • SSDEEP

    6144:jxiY0Ka+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:jxiYKE6uidyzwr6AxfLeI1Su63lgMBdQ

Malware Config

Targets

    • Target

      36eb6fcb992a3297a4f04bc4eedd9740_NeikiAnalytics.exe

    • Size

      374KB

    • MD5

      36eb6fcb992a3297a4f04bc4eedd9740

    • SHA1

      4b6d29636971f0a27e9ec18509854a016161298a

    • SHA256

      9da6d9d8e46aec7a04f1e0b373a00f28590b69d6fbac359d90634a4318100246

    • SHA512

      e74614510fd05fcdf33351b6bac63f046e5540eb6edcaff2127ade13938ec15ff7b2497645fabd15661b5cf2407027e4c10ecc893afd97ef37cb9501f237f724

    • SSDEEP

      6144:jxiY0Ka+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:jxiYKE6uidyzwr6AxfLeI1Su63lgMBdQ

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks