General

  • Target

    d61ae36c387775e0da59bb111e3d1c60_NEIKI

  • Size

    367KB

  • Sample

    240509-ddxfrsef4t

  • MD5

    d61ae36c387775e0da59bb111e3d1c60

  • SHA1

    9a58dcabb0dc18f6057a831d7aec298e61eebe48

  • SHA256

    6ea853c0fde016403ca1553877a011dc418e8102f5d2b191eb28c68caa7f5fdf

  • SHA512

    ff188450f3620ccd939fe1739333df2045c40bdfb941405a7cd866ae2da641c49944a615c965d0148e0cfbd08daa4e856c6e1c200431c2e6ceefbb088a8252ee

  • SSDEEP

    6144:vYeaITaIpdfo3rLtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:vOITaOCvtJCXqP77D7FB24lwR45FB24h

Malware Config

Targets

    • Target

      d61ae36c387775e0da59bb111e3d1c60_NEIKI

    • Size

      367KB

    • MD5

      d61ae36c387775e0da59bb111e3d1c60

    • SHA1

      9a58dcabb0dc18f6057a831d7aec298e61eebe48

    • SHA256

      6ea853c0fde016403ca1553877a011dc418e8102f5d2b191eb28c68caa7f5fdf

    • SHA512

      ff188450f3620ccd939fe1739333df2045c40bdfb941405a7cd866ae2da641c49944a615c965d0148e0cfbd08daa4e856c6e1c200431c2e6ceefbb088a8252ee

    • SSDEEP

      6144:vYeaITaIpdfo3rLtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:vOITaOCvtJCXqP77D7FB24lwR45FB24h

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks