General

  • Target

    48c70148ac9dad723d88f905adde6e30_NeikiAnalytics.exe

  • Size

    366KB

  • Sample

    240602-g9eglsdg6v

  • MD5

    48c70148ac9dad723d88f905adde6e30

  • SHA1

    7e6eb2e2f95830ac968d3e1320fa02d2a6952431

  • SHA256

    54960cbb24c7c60ce9f72bc397223a5371e549cef240c0c721ce263e59e0b99f

  • SHA512

    39058820295e314ad12ab77b108daa16f5cf5696d647e680364d1e52c46f1981db04e96115d88441861168430505edb6563d6b4ea100710f27cc5f53ff152dae

  • SSDEEP

    6144:Xqqsb8rxeEtLnLcdpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckvN4Ni:Gke8PcdpV6yYPMLnfBJKFbhDwBpV6yYU

Malware Config

Targets

    • Target

      48c70148ac9dad723d88f905adde6e30_NeikiAnalytics.exe

    • Size

      366KB

    • MD5

      48c70148ac9dad723d88f905adde6e30

    • SHA1

      7e6eb2e2f95830ac968d3e1320fa02d2a6952431

    • SHA256

      54960cbb24c7c60ce9f72bc397223a5371e549cef240c0c721ce263e59e0b99f

    • SHA512

      39058820295e314ad12ab77b108daa16f5cf5696d647e680364d1e52c46f1981db04e96115d88441861168430505edb6563d6b4ea100710f27cc5f53ff152dae

    • SSDEEP

      6144:Xqqsb8rxeEtLnLcdpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGckvN4Ni:Gke8PcdpV6yYPMLnfBJKFbhDwBpV6yYU

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks