General

  • Target

    d5cfa98e79e2bd9b40460ce4a96c0050_NEIKI

  • Size

    121KB

  • Sample

    240509-ddbt3ahd77

  • MD5

    d5cfa98e79e2bd9b40460ce4a96c0050

  • SHA1

    622374816d86c8967d9c448226733f01db55b5f9

  • SHA256

    10e2c92914c153a02c8126937b00efbee2b4880e46bc160076c6ad6f8ad61842

  • SHA512

    e9a7e1bc83a1f61148d35225f60ff13e1fc6725d813ac7b568010e376a9787c8ab2a308657e27c05737b407f4883cc4f29d805535caccae1e9aa199f49add129

  • SSDEEP

    1536:9sgxtxmwJB5W3k4pBGPXcCiz7Pzf1hoco3IQjRVv1CV19zQYOd5ijJnD5ir3oGuv:O4JB5yPn931No3fjRVvUO7AJnD5tvv

Malware Config

Targets

    • Target

      d5cfa98e79e2bd9b40460ce4a96c0050_NEIKI

    • Size

      121KB

    • MD5

      d5cfa98e79e2bd9b40460ce4a96c0050

    • SHA1

      622374816d86c8967d9c448226733f01db55b5f9

    • SHA256

      10e2c92914c153a02c8126937b00efbee2b4880e46bc160076c6ad6f8ad61842

    • SHA512

      e9a7e1bc83a1f61148d35225f60ff13e1fc6725d813ac7b568010e376a9787c8ab2a308657e27c05737b407f4883cc4f29d805535caccae1e9aa199f49add129

    • SSDEEP

      1536:9sgxtxmwJB5W3k4pBGPXcCiz7Pzf1hoco3IQjRVv1CV19zQYOd5ijJnD5ir3oGuv:O4JB5yPn931No3fjRVvUO7AJnD5tvv

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks