General

  • Target

    d8ef66efd9c1f33cd8bc0447439a3a70_NEIKI

  • Size

    227KB

  • Sample

    240509-dkyx6sfa7z

  • MD5

    d8ef66efd9c1f33cd8bc0447439a3a70

  • SHA1

    516209a7026517b7d275b7b34af02e0f2fd79f7d

  • SHA256

    d2cc3e920197b8acd838f18571ec1472edfedd32bdebfb08a99ca91d3ba00612

  • SHA512

    dfe208dd53b325afdc1ede565ba12bec3f65d4aebf73fd25c5ef597183d0c7ce0a9a6e431ff78291d0d3df99b538b94d83a4a6cfd5f0bbe04486460b1651a6ac

  • SSDEEP

    3072:Anx6HNcu4Tlyng5IleyLpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:Y6HN34TUg/Rm7U5j2QE2+g24Id2jFHu

Malware Config

Targets

    • Target

      d8ef66efd9c1f33cd8bc0447439a3a70_NEIKI

    • Size

      227KB

    • MD5

      d8ef66efd9c1f33cd8bc0447439a3a70

    • SHA1

      516209a7026517b7d275b7b34af02e0f2fd79f7d

    • SHA256

      d2cc3e920197b8acd838f18571ec1472edfedd32bdebfb08a99ca91d3ba00612

    • SHA512

      dfe208dd53b325afdc1ede565ba12bec3f65d4aebf73fd25c5ef597183d0c7ce0a9a6e431ff78291d0d3df99b538b94d83a4a6cfd5f0bbe04486460b1651a6ac

    • SSDEEP

      3072:Anx6HNcu4Tlyng5IleyLpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:Y6HN34TUg/Rm7U5j2QE2+g24Id2jFHu

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks