General

  • Target

    d8470b70dc62ba95d864e7fa78dd0e70_NEIKI

  • Size

    143KB

  • Sample

    240509-djn2kshg89

  • MD5

    d8470b70dc62ba95d864e7fa78dd0e70

  • SHA1

    035d78be671264cb3b0af5d1b26451a99c57e256

  • SHA256

    ce7fc71e193186f28e75ade83a4eb9e1951460a6f46025961b0efbb4c67cc0a3

  • SHA512

    e3dbd89e992581ce9594c83695cb9e809e011fc68c1e434d3908a68aaa5ec095ab7fe290c4ca92e1b6ecc560fc9c027187b1e90ae1bfb1e5c2ef8b75b08124fd

  • SSDEEP

    3072:3F5Uz+4KdQ6GNmDssssssssHs3N93bsGfhv0vt3y:V5eXhOs3vLsGZv0vti

Malware Config

Targets

    • Target

      d8470b70dc62ba95d864e7fa78dd0e70_NEIKI

    • Size

      143KB

    • MD5

      d8470b70dc62ba95d864e7fa78dd0e70

    • SHA1

      035d78be671264cb3b0af5d1b26451a99c57e256

    • SHA256

      ce7fc71e193186f28e75ade83a4eb9e1951460a6f46025961b0efbb4c67cc0a3

    • SHA512

      e3dbd89e992581ce9594c83695cb9e809e011fc68c1e434d3908a68aaa5ec095ab7fe290c4ca92e1b6ecc560fc9c027187b1e90ae1bfb1e5c2ef8b75b08124fd

    • SSDEEP

      3072:3F5Uz+4KdQ6GNmDssssssssHs3N93bsGfhv0vt3y:V5eXhOs3vLsGZv0vti

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks