General

  • Target

    d8fc9f02cce45b9d76c70c8cc9687ae0_NEIKI

  • Size

    1.9MB

  • Sample

    240509-dk7kbahh73

  • MD5

    d8fc9f02cce45b9d76c70c8cc9687ae0

  • SHA1

    15fa208205b9286e9c18d2970250da8b4ce3c995

  • SHA256

    43ea164c8adbf1574bea6076d29769ae4f350f106fe559b74f7a2b444ae1eff8

  • SHA512

    c5bd00aef1a95079a6d103d2634da42d8c47e418ce9178f3a09f2f1250a2514e722511e6c2baf03edefd6e788a44805258768a1db13d9c66290277382f9e8842

  • SSDEEP

    49152:saSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:saSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY

Malware Config

Targets

    • Target

      d8fc9f02cce45b9d76c70c8cc9687ae0_NEIKI

    • Size

      1.9MB

    • MD5

      d8fc9f02cce45b9d76c70c8cc9687ae0

    • SHA1

      15fa208205b9286e9c18d2970250da8b4ce3c995

    • SHA256

      43ea164c8adbf1574bea6076d29769ae4f350f106fe559b74f7a2b444ae1eff8

    • SHA512

      c5bd00aef1a95079a6d103d2634da42d8c47e418ce9178f3a09f2f1250a2514e722511e6c2baf03edefd6e788a44805258768a1db13d9c66290277382f9e8842

    • SSDEEP

      49152:saSHFaZRBEYyqmS2DiHPKQgmZUnaUgpC7jvha51N:saSHFaZRBEYyqmS2DiHPKQgmZ0aUgUjY

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks