General

  • Target

    318dbe9c3938b814973b0a1399205890_NeikiAnalytics.exe

  • Size

    125KB

  • Sample

    240602-eez4qaaa51

  • MD5

    318dbe9c3938b814973b0a1399205890

  • SHA1

    08fd06d63926301bc626b59221aca8378519237e

  • SHA256

    4792513239fee3d46f7ee0f8e76c1a761ac675328f7200b32426ecfe2f353f06

  • SHA512

    1f11ea49f92df1ed741d4e92c6fedf5d78c4c0714061a4fff223d506f092f2cb722750aeaeda36ef0e3aace61af23b88dc05a9e2cc2d77a4e5452e18d77418db

  • SSDEEP

    3072:J3pJNUo8XKB1YIuTwVcP1WdTCn93OGey/ZhJakrPF:J5J6XKBpuicgTCndOGeKTaG

Malware Config

Targets

    • Target

      318dbe9c3938b814973b0a1399205890_NeikiAnalytics.exe

    • Size

      125KB

    • MD5

      318dbe9c3938b814973b0a1399205890

    • SHA1

      08fd06d63926301bc626b59221aca8378519237e

    • SHA256

      4792513239fee3d46f7ee0f8e76c1a761ac675328f7200b32426ecfe2f353f06

    • SHA512

      1f11ea49f92df1ed741d4e92c6fedf5d78c4c0714061a4fff223d506f092f2cb722750aeaeda36ef0e3aace61af23b88dc05a9e2cc2d77a4e5452e18d77418db

    • SSDEEP

      3072:J3pJNUo8XKB1YIuTwVcP1WdTCn93OGey/ZhJakrPF:J5J6XKBpuicgTCndOGeKTaG

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks