General

  • Target

    d41eac03cf654c9e4657ad9fdc374fd0_NeikiAnalytics.exe

  • Size

    448KB

  • Sample

    240604-yqq5qshg3s

  • MD5

    d41eac03cf654c9e4657ad9fdc374fd0

  • SHA1

    83a7997fdbeee20cb9991b0770d55539e04d374a

  • SHA256

    02e383641d1bee1031cb12872c7fa9782b8de3bda07f2cfb1613aa19cadf046e

  • SHA512

    98351697d45eba18bc12111f8c2f299e2d0e612ce85eba844a8392810ea24a4f9348adc5a769076ae604cdcedf7c1c8d13a14250ded528ea8650cc2ca20bd927

  • SSDEEP

    6144:5QaQvgqRJLU/UkEjiPISUOgW9X+hOGzC/NM:5jQ1tkmZzcukG2/

Malware Config

Targets

    • Target

      d41eac03cf654c9e4657ad9fdc374fd0_NeikiAnalytics.exe

    • Size

      448KB

    • MD5

      d41eac03cf654c9e4657ad9fdc374fd0

    • SHA1

      83a7997fdbeee20cb9991b0770d55539e04d374a

    • SHA256

      02e383641d1bee1031cb12872c7fa9782b8de3bda07f2cfb1613aa19cadf046e

    • SHA512

      98351697d45eba18bc12111f8c2f299e2d0e612ce85eba844a8392810ea24a4f9348adc5a769076ae604cdcedf7c1c8d13a14250ded528ea8650cc2ca20bd927

    • SSDEEP

      6144:5QaQvgqRJLU/UkEjiPISUOgW9X+hOGzC/NM:5jQ1tkmZzcukG2/

    Score
    10/10
    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Matrix ATT&CK v13

Discovery

Query Registry

1
T1012

System Information Discovery

2
T1082

Tasks