General

  • Target

    4985c4f4bf82b6ec232be30c9bcde850_NeikiAnalytics.exe

  • Size

    669KB

  • Sample

    240602-hczlysee33

  • MD5

    4985c4f4bf82b6ec232be30c9bcde850

  • SHA1

    1f887516644751b8e82ba3e2fbbe2c2e360b7b09

  • SHA256

    e2e51e1b41f026c40c30905bf950f51bbef841020a24e7a9083c98f36c336de3

  • SHA512

    26678fb00c678df4f00391546f7b5b5d91ff43374e4e697811ac452ec9ef52753a99091bdc383e3455bf1817954b44ccd9eca0a74b219b45b25ac6855a1c0966

  • SSDEEP

    12288:PFBY0weVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:PFNLchMpQnqrdX72LbY6x46uR/qYglMi

Malware Config

Targets

    • Target

      4985c4f4bf82b6ec232be30c9bcde850_NeikiAnalytics.exe

    • Size

      669KB

    • MD5

      4985c4f4bf82b6ec232be30c9bcde850

    • SHA1

      1f887516644751b8e82ba3e2fbbe2c2e360b7b09

    • SHA256

      e2e51e1b41f026c40c30905bf950f51bbef841020a24e7a9083c98f36c336de3

    • SHA512

      26678fb00c678df4f00391546f7b5b5d91ff43374e4e697811ac452ec9ef52753a99091bdc383e3455bf1817954b44ccd9eca0a74b219b45b25ac6855a1c0966

    • SSDEEP

      12288:PFBY0weVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:PFNLchMpQnqrdX72LbY6x46uR/qYglMi

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks