General

  • Target

    d971ccc159fd0f1412c36105b984f7e0_NEIKI

  • Size

    109KB

  • Sample

    240509-dmbknaaa53

  • MD5

    d971ccc159fd0f1412c36105b984f7e0

  • SHA1

    c076fd695f63434355628159e62aa04e2ae0379a

  • SHA256

    a6df1cfb7d17b3cb6bb9d00d5d223e515da3174392f1cac5829c78cf633ad4b6

  • SHA512

    2d7d7667fbbf248988b910c9c9f745ff044c64d1f5b841e1f7ea32f89c85ba68d3a4df1572b039f763282a9e2ea7a36dc488e9b5c52ec91d29431c952bf84043

  • SSDEEP

    3072:dzNnjzs7ODNdD5n47USqmEdTXJ9kLCqwzBu1DjHLMVDqqkSpR:1Njzs7SLDmwTXJ9swtu1DjrFqhz

Malware Config

Targets

    • Target

      d971ccc159fd0f1412c36105b984f7e0_NEIKI

    • Size

      109KB

    • MD5

      d971ccc159fd0f1412c36105b984f7e0

    • SHA1

      c076fd695f63434355628159e62aa04e2ae0379a

    • SHA256

      a6df1cfb7d17b3cb6bb9d00d5d223e515da3174392f1cac5829c78cf633ad4b6

    • SHA512

      2d7d7667fbbf248988b910c9c9f745ff044c64d1f5b841e1f7ea32f89c85ba68d3a4df1572b039f763282a9e2ea7a36dc488e9b5c52ec91d29431c952bf84043

    • SSDEEP

      3072:dzNnjzs7ODNdD5n47USqmEdTXJ9kLCqwzBu1DjHLMVDqqkSpR:1Njzs7SLDmwTXJ9swtu1DjrFqhz

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks