General

  • Target

    dad12eed121040c3b4524bae5f46a260_NEIKI

  • Size

    340KB

  • Sample

    240509-dpy4qsfc8x

  • MD5

    dad12eed121040c3b4524bae5f46a260

  • SHA1

    39179ab2e01a1142ac5303fcf9c91df8435b2399

  • SHA256

    7ed3ed2eda96a5f5d55266187d1bf12683fcb97b3a7c9b6d17fc67762f3d7371

  • SHA512

    8cd001a9dcdca3f90091b454c411546e065266b96bf9b74957e44b6530f1c8f0291fa44777e319e844171c9c4304dc523b35328c2fa94db70439c4e2842e890d

  • SSDEEP

    6144:TGbasDTWgVIyedZwlNPjLs+H8rtMsQBJyJyymeH:TGmfyGZwlNPjLYRMsXJvmeH

Malware Config

Targets

    • Target

      dad12eed121040c3b4524bae5f46a260_NEIKI

    • Size

      340KB

    • MD5

      dad12eed121040c3b4524bae5f46a260

    • SHA1

      39179ab2e01a1142ac5303fcf9c91df8435b2399

    • SHA256

      7ed3ed2eda96a5f5d55266187d1bf12683fcb97b3a7c9b6d17fc67762f3d7371

    • SHA512

      8cd001a9dcdca3f90091b454c411546e065266b96bf9b74957e44b6530f1c8f0291fa44777e319e844171c9c4304dc523b35328c2fa94db70439c4e2842e890d

    • SSDEEP

      6144:TGbasDTWgVIyedZwlNPjLs+H8rtMsQBJyJyymeH:TGmfyGZwlNPjLYRMsXJvmeH

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks