General

  • Target

    d7cd5634f9827c222951389c641f91c0_NEIKI

  • Size

    304KB

  • Sample

    240509-dhkmrshg44

  • MD5

    d7cd5634f9827c222951389c641f91c0

  • SHA1

    bc447aafd21a8c5824bee8ee0d9a6763e38ba1d7

  • SHA256

    26703555334e87a1f9f256917fb54d2b4fe00adf1f88f53610b238eab2859f32

  • SHA512

    88cb2d25439c93893aea553419b3561db83c32f744c74cda8c4777fd7978de9db12cc21ddfe79cd68833cf0bc24c34a4a02388ccf38cb19fc0985f0ae1cccb41

  • SSDEEP

    6144:uP6OUvx59OynFeJLbnCBbC+nVLjOPj194oQAPJiduHyFfeoHiWmVlWaPxqZcNpCF:I6OclFeJLbnCN3xjOPj1Gg2uHyFfeoHV

Malware Config

Targets

    • Target

      d7cd5634f9827c222951389c641f91c0_NEIKI

    • Size

      304KB

    • MD5

      d7cd5634f9827c222951389c641f91c0

    • SHA1

      bc447aafd21a8c5824bee8ee0d9a6763e38ba1d7

    • SHA256

      26703555334e87a1f9f256917fb54d2b4fe00adf1f88f53610b238eab2859f32

    • SHA512

      88cb2d25439c93893aea553419b3561db83c32f744c74cda8c4777fd7978de9db12cc21ddfe79cd68833cf0bc24c34a4a02388ccf38cb19fc0985f0ae1cccb41

    • SSDEEP

      6144:uP6OUvx59OynFeJLbnCBbC+nVLjOPj194oQAPJiduHyFfeoHiWmVlWaPxqZcNpCF:I6OclFeJLbnCN3xjOPj1Gg2uHyFfeoHV

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks