General

  • Target

    395652be3385c08663cf15e837e00b40_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240602-fenw5acb34

  • MD5

    395652be3385c08663cf15e837e00b40

  • SHA1

    6b2999c210afe37cdc6a4e15c683802282026c97

  • SHA256

    94936016c92c134237a151bf0b124315d2b887c9600db978b6d7bcae012a0129

  • SHA512

    4c0c2dca9a1eb1ca25b54df6965c11d9588ebc5bda0b40f142ca3b48b6f8ac8d91fc8e38dbb0a7522e30ffbcc7c491c3396d3232f626e968dfe8a9527d6ed2d9

  • SSDEEP

    1536:NFbtYW9nk/gVAoOQrMX5DrUHYYNVpG4e02FJEAloeKh+zUg8SoLP9PshXpZcWiqU:jlkYVdZkBKczUFSWmXpmW2wS7IrHrYj

Malware Config

Targets

    • Target

      395652be3385c08663cf15e837e00b40_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      395652be3385c08663cf15e837e00b40

    • SHA1

      6b2999c210afe37cdc6a4e15c683802282026c97

    • SHA256

      94936016c92c134237a151bf0b124315d2b887c9600db978b6d7bcae012a0129

    • SHA512

      4c0c2dca9a1eb1ca25b54df6965c11d9588ebc5bda0b40f142ca3b48b6f8ac8d91fc8e38dbb0a7522e30ffbcc7c491c3396d3232f626e968dfe8a9527d6ed2d9

    • SSDEEP

      1536:NFbtYW9nk/gVAoOQrMX5DrUHYYNVpG4e02FJEAloeKh+zUg8SoLP9PshXpZcWiqU:jlkYVdZkBKczUFSWmXpmW2wS7IrHrYj

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks