General

  • Target

    36c5db4953ddc95ac25c6d7d7b76be90_NeikiAnalytics.exe

  • Size

    391KB

  • Sample

    240602-e3h54sah7y

  • MD5

    36c5db4953ddc95ac25c6d7d7b76be90

  • SHA1

    53cca009b3d79fa2da26d96d031021ccab90989e

  • SHA256

    be3533491d17aab02091116c1425a469a772661d3e4dc3c4b70cf6c351cab10c

  • SHA512

    81eb41f489cd696ece5df0eae5dc81c806d7e954e28cb38acadf382fad7fcd2003ec302d32b8f03c055bcdf11531c181be8427d9ee666beeaab2f097a52b2167

  • SSDEEP

    12288:0Bql4T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:0l9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

Malware Config

Targets

    • Target

      36c5db4953ddc95ac25c6d7d7b76be90_NeikiAnalytics.exe

    • Size

      391KB

    • MD5

      36c5db4953ddc95ac25c6d7d7b76be90

    • SHA1

      53cca009b3d79fa2da26d96d031021ccab90989e

    • SHA256

      be3533491d17aab02091116c1425a469a772661d3e4dc3c4b70cf6c351cab10c

    • SHA512

      81eb41f489cd696ece5df0eae5dc81c806d7e954e28cb38acadf382fad7fcd2003ec302d32b8f03c055bcdf11531c181be8427d9ee666beeaab2f097a52b2167

    • SSDEEP

      12288:0Bql4T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:0l9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks