General

  • Target

    3440a38f9022c196dfc10c46a2a50160_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240602-eq47tabb23

  • MD5

    3440a38f9022c196dfc10c46a2a50160

  • SHA1

    1e65491dc2fb0fd88a119b87fa281d3708d6f0a9

  • SHA256

    ce4e6d7ed1c7deb018d7ee155d98e4fbbf8a9ecdbb9cfb729ba012dbc1c197ee

  • SHA512

    e29a15057beb354faafa1ea10fe0f2f5d31b86f976449c0ff49c4bd4be8baea3c47dd9a24ce3e4eebd55321bb0a8e5ab8ed585b14b62e9b4992a33a754fb411f

  • SSDEEP

    6144:Z6Ye/Icl4yjThipmMH/gysNkvC8vA+XTv7FYUwMOFusQ+kJ3StWDKcGVol:EFv4pnsKvNA+XTvZHWuEo3oW2to

Malware Config

Targets

    • Target

      3440a38f9022c196dfc10c46a2a50160_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      3440a38f9022c196dfc10c46a2a50160

    • SHA1

      1e65491dc2fb0fd88a119b87fa281d3708d6f0a9

    • SHA256

      ce4e6d7ed1c7deb018d7ee155d98e4fbbf8a9ecdbb9cfb729ba012dbc1c197ee

    • SHA512

      e29a15057beb354faafa1ea10fe0f2f5d31b86f976449c0ff49c4bd4be8baea3c47dd9a24ce3e4eebd55321bb0a8e5ab8ed585b14b62e9b4992a33a754fb411f

    • SSDEEP

      6144:Z6Ye/Icl4yjThipmMH/gysNkvC8vA+XTv7FYUwMOFusQ+kJ3StWDKcGVol:EFv4pnsKvNA+XTvZHWuEo3oW2to

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks