General

  • Target

    dbd8cf1b46e1716339b47119261dc530_NEIKI

  • Size

    107KB

  • Sample

    240509-dsf3bsad57

  • MD5

    dbd8cf1b46e1716339b47119261dc530

  • SHA1

    a08e382bb3ef0fa285609cc6d003ff32f711ede6

  • SHA256

    465b7ad872c8f6304b3e49b3107766481a4f2216634011ad95ea76d444324cb2

  • SHA512

    78571ab4f1846411df645eadfb0a75b20bebbe78af3af50b50e5ca02546b5fa9a63e3e23328fb30467f6b13cda7254abb6070e8a704c68a8b93e8fb68e51790f

  • SSDEEP

    1536:csScs59t2kDmqkEONnxMy7gusmZJ8nDq2LuhaIZTJ+7LhkiB0MPiKeEAgHD/Chxi:cRNmq1ONnmy7VsmQD3+aMU7uihJ5233y

Malware Config

Targets

    • Target

      dbd8cf1b46e1716339b47119261dc530_NEIKI

    • Size

      107KB

    • MD5

      dbd8cf1b46e1716339b47119261dc530

    • SHA1

      a08e382bb3ef0fa285609cc6d003ff32f711ede6

    • SHA256

      465b7ad872c8f6304b3e49b3107766481a4f2216634011ad95ea76d444324cb2

    • SHA512

      78571ab4f1846411df645eadfb0a75b20bebbe78af3af50b50e5ca02546b5fa9a63e3e23328fb30467f6b13cda7254abb6070e8a704c68a8b93e8fb68e51790f

    • SSDEEP

      1536:csScs59t2kDmqkEONnxMy7gusmZJ8nDq2LuhaIZTJ+7LhkiB0MPiKeEAgHD/Chxi:cRNmq1ONnmy7VsmQD3+aMU7uihJ5233y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks