General

  • Target

    d769cd605c4d14e0e6b2e2ad760f76f0_NEIKI

  • Size

    302KB

  • Sample

    240509-dgsxraeh2s

  • MD5

    d769cd605c4d14e0e6b2e2ad760f76f0

  • SHA1

    0803ce06596fa0579f516199c99b8cf0214ea222

  • SHA256

    45a1fe3b1f15062a1c63fc64fdd145233ede3003928022c5969954297e446079

  • SHA512

    45530102594cf85894ec9b1c22dd8b453df1f46f12ff80f42cf5c0be50ece50fa7f1bb32daaefb42c5f8271c9307cbac5790edf0f8fcc03aa854e6be1395949f

  • SSDEEP

    6144:1iLBKjOwLL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:7v8lXhuT9XvEhdfEmwlY1

Malware Config

Targets

    • Target

      d769cd605c4d14e0e6b2e2ad760f76f0_NEIKI

    • Size

      302KB

    • MD5

      d769cd605c4d14e0e6b2e2ad760f76f0

    • SHA1

      0803ce06596fa0579f516199c99b8cf0214ea222

    • SHA256

      45a1fe3b1f15062a1c63fc64fdd145233ede3003928022c5969954297e446079

    • SHA512

      45530102594cf85894ec9b1c22dd8b453df1f46f12ff80f42cf5c0be50ece50fa7f1bb32daaefb42c5f8271c9307cbac5790edf0f8fcc03aa854e6be1395949f

    • SSDEEP

      6144:1iLBKjOwLL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:7v8lXhuT9XvEhdfEmwlY1

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks