General

  • Target

    3cf80586293ed3afaf8f0ffeefc401c0_NeikiAnalytics.exe

  • Size

    115KB

  • Sample

    240602-fwslmscb5z

  • MD5

    3cf80586293ed3afaf8f0ffeefc401c0

  • SHA1

    b07d59f202d917631b5903b7733c8fb4c9309f7b

  • SHA256

    3179c623007595bc323bf3a42c5424e307881bc0f015444d205bd67458b40b0b

  • SHA512

    de86ed79e737e3d8ca4017f557c882402d88b798a311284e694ae4e38fad9b2f4e911e2b7b135a48a6244e8621fbefcc20c6ce14e0dcfd1f7e4b2d1bc0baae7e

  • SSDEEP

    3072:khLolXq3LaRK2I1wdbrIR/SoQUP5u30KqTKr4:khMlXq7vwhrIooQUPoDqTKE

Malware Config

Targets

    • Target

      3cf80586293ed3afaf8f0ffeefc401c0_NeikiAnalytics.exe

    • Size

      115KB

    • MD5

      3cf80586293ed3afaf8f0ffeefc401c0

    • SHA1

      b07d59f202d917631b5903b7733c8fb4c9309f7b

    • SHA256

      3179c623007595bc323bf3a42c5424e307881bc0f015444d205bd67458b40b0b

    • SHA512

      de86ed79e737e3d8ca4017f557c882402d88b798a311284e694ae4e38fad9b2f4e911e2b7b135a48a6244e8621fbefcc20c6ce14e0dcfd1f7e4b2d1bc0baae7e

    • SSDEEP

      3072:khLolXq3LaRK2I1wdbrIR/SoQUP5u30KqTKr4:khMlXq7vwhrIooQUPoDqTKE

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks