General

  • Target

    d5536867cd8e9ff8dfc2cb016ef94020_NEIKI

  • Size

    391KB

  • Sample

    240509-db99vahc96

  • MD5

    d5536867cd8e9ff8dfc2cb016ef94020

  • SHA1

    5e28f006cfd2cb4f20b77ff2a3085190301a39b2

  • SHA256

    f0d04f953a52131b97dd9e5959f6acee551df7abe5ec0e501f9063c283af49ac

  • SHA512

    eda32f03eacc12e0653f4228441f304f05791bbfef8e8cfe7941141ef11a49b91b52d8943dea2dd34d8b8b2e48005fd951d638789055c08b08647c0118d1c6c3

  • SSDEEP

    12288:Q6wUjAT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Q6RjA9XvEhdfJkKSkU3kHyuaRB5t6k0F

Malware Config

Targets

    • Target

      d5536867cd8e9ff8dfc2cb016ef94020_NEIKI

    • Size

      391KB

    • MD5

      d5536867cd8e9ff8dfc2cb016ef94020

    • SHA1

      5e28f006cfd2cb4f20b77ff2a3085190301a39b2

    • SHA256

      f0d04f953a52131b97dd9e5959f6acee551df7abe5ec0e501f9063c283af49ac

    • SHA512

      eda32f03eacc12e0653f4228441f304f05791bbfef8e8cfe7941141ef11a49b91b52d8943dea2dd34d8b8b2e48005fd951d638789055c08b08647c0118d1c6c3

    • SSDEEP

      12288:Q6wUjAT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Q6RjA9XvEhdfJkKSkU3kHyuaRB5t6k0F

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks