General

  • Target

    db746f29cbedcc7ee3d423efb5d5b2b0_NEIKI

  • Size

    199KB

  • Sample

    240509-drpcbaad23

  • MD5

    db746f29cbedcc7ee3d423efb5d5b2b0

  • SHA1

    6f3feab089a54a487a06cf2d3190c4f65affd6fd

  • SHA256

    cbbd339195cc7424991f798abd62d8940efdf4401fa80c155cba51159be229d6

  • SHA512

    06c68be0a22985a1f70e66ef18a5763b5102d03a97cb3000a134f5a32574719861757486bf6c719646df714d628125bdeeafc9b0f7cc244a8f18cd3794b4923a

  • SSDEEP

    6144:qwyernlRQgj3I2+UrrSZSCZj81+jq4peBK034YOmFz1h:qHn2PqZSCG1+jheBbOmFxh

Malware Config

Targets

    • Target

      db746f29cbedcc7ee3d423efb5d5b2b0_NEIKI

    • Size

      199KB

    • MD5

      db746f29cbedcc7ee3d423efb5d5b2b0

    • SHA1

      6f3feab089a54a487a06cf2d3190c4f65affd6fd

    • SHA256

      cbbd339195cc7424991f798abd62d8940efdf4401fa80c155cba51159be229d6

    • SHA512

      06c68be0a22985a1f70e66ef18a5763b5102d03a97cb3000a134f5a32574719861757486bf6c719646df714d628125bdeeafc9b0f7cc244a8f18cd3794b4923a

    • SSDEEP

      6144:qwyernlRQgj3I2+UrrSZSCZj81+jq4peBK034YOmFz1h:qHn2PqZSCG1+jheBbOmFxh

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks