General

  • Target

    d69be8594e2c05faddb01ec017d550a0_NEIKI

  • Size

    416KB

  • Sample

    240509-de8keshe88

  • MD5

    d69be8594e2c05faddb01ec017d550a0

  • SHA1

    b2a57b53350ad7b4ec81bc378e146f110b034eda

  • SHA256

    c2f3b1f1fb299d7c28cf0613572d9480c633fc9ecd0cf158e6c0232d916891aa

  • SHA512

    e1408756e89eb4b97eb1659e26fa9a7c6d0a69c5ad56067bd294393c94ea700c9acfa9660ca077cf1de56e290da4d45f206132a7e82fd40ebca14f5a3820880f

  • SSDEEP

    12288:MBMScVYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:MBMS2YJ07kE0KoFtw2gu9RxrBIUbPLwB

Malware Config

Targets

    • Target

      d69be8594e2c05faddb01ec017d550a0_NEIKI

    • Size

      416KB

    • MD5

      d69be8594e2c05faddb01ec017d550a0

    • SHA1

      b2a57b53350ad7b4ec81bc378e146f110b034eda

    • SHA256

      c2f3b1f1fb299d7c28cf0613572d9480c633fc9ecd0cf158e6c0232d916891aa

    • SHA512

      e1408756e89eb4b97eb1659e26fa9a7c6d0a69c5ad56067bd294393c94ea700c9acfa9660ca077cf1de56e290da4d45f206132a7e82fd40ebca14f5a3820880f

    • SSDEEP

      12288:MBMScVYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:MBMS2YJ07kE0KoFtw2gu9RxrBIUbPLwB

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks