General

  • Target

    436327931775ca07fddf00f646e2f650_NeikiAnalytics.exe

  • Size

    340KB

  • Sample

    240602-gla5aade48

  • MD5

    436327931775ca07fddf00f646e2f650

  • SHA1

    57242d7212a16b1c02b526c53342a0ef0ad9c59a

  • SHA256

    f086be681dd818c32ce43a134778965fdee51326bcb1ee90cc8a8e0d92116a31

  • SHA512

    03cc82318198e820219671890e3b52a7131d18f13af4bedb0c753d25b325539f54cbf5fea3fd92514b130aaa9e135ccaa78ccaa76e9ffc322a7d9da8ea291ff3

  • SSDEEP

    6144:FpKG5UIyedZwlNPjLs+H8rtMsQBJyJyymeH:FzyGZwlNPjLYRMsXJvmeH

Malware Config

Targets

    • Target

      436327931775ca07fddf00f646e2f650_NeikiAnalytics.exe

    • Size

      340KB

    • MD5

      436327931775ca07fddf00f646e2f650

    • SHA1

      57242d7212a16b1c02b526c53342a0ef0ad9c59a

    • SHA256

      f086be681dd818c32ce43a134778965fdee51326bcb1ee90cc8a8e0d92116a31

    • SHA512

      03cc82318198e820219671890e3b52a7131d18f13af4bedb0c753d25b325539f54cbf5fea3fd92514b130aaa9e135ccaa78ccaa76e9ffc322a7d9da8ea291ff3

    • SSDEEP

      6144:FpKG5UIyedZwlNPjLs+H8rtMsQBJyJyymeH:FzyGZwlNPjLYRMsXJvmeH

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks