General

  • Target

    dbfcc90ac497a1cc84642a5f4c9fe7d0_NEIKI

  • Size

    401KB

  • Sample

    240509-dssfcsad79

  • MD5

    dbfcc90ac497a1cc84642a5f4c9fe7d0

  • SHA1

    d9761963dbbc6e6abbc9661341cb58e4f454654d

  • SHA256

    4a72fc306d3d0af6a80da40bee36f915f6d568a94228a898c4727a53aea4b0e2

  • SHA512

    0ea4e0859af64cf0eee1a179532e17631b360f8714165a0622c96bbc1ce66730254722cde9f550f34214460f5ad8fd35b184ffd70d42508aa80cfaab8010cd54

  • SSDEEP

    6144:ZSKYj8ej3OV3+ndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:kKy8ejeAndpV6yYP4rbpV6yYPg058KrY

Malware Config

Targets

    • Target

      dbfcc90ac497a1cc84642a5f4c9fe7d0_NEIKI

    • Size

      401KB

    • MD5

      dbfcc90ac497a1cc84642a5f4c9fe7d0

    • SHA1

      d9761963dbbc6e6abbc9661341cb58e4f454654d

    • SHA256

      4a72fc306d3d0af6a80da40bee36f915f6d568a94228a898c4727a53aea4b0e2

    • SHA512

      0ea4e0859af64cf0eee1a179532e17631b360f8714165a0622c96bbc1ce66730254722cde9f550f34214460f5ad8fd35b184ffd70d42508aa80cfaab8010cd54

    • SSDEEP

      6144:ZSKYj8ej3OV3+ndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:kKy8ejeAndpV6yYP4rbpV6yYPg058KrY

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks