General

  • Target

    dc2ce3e4003037b96b18d5d265d92d10_NEIKI

  • Size

    187KB

  • Sample

    240509-dtbh8sff2s

  • MD5

    dc2ce3e4003037b96b18d5d265d92d10

  • SHA1

    af296f2ca3cfa6e11fc3c840d8ab91d8973cedd8

  • SHA256

    2c9ad870a136f3eea249a1700f31f0c90d02849e3c5aa770d6ad380f3d4a63c9

  • SHA512

    c2b6e7b87ba989e2a3f9552ce47fa0fe913127abfd479d14f1cb2ca082b0019a6f5deee73fe9f9220f33ba2311b008bcf7946ddef090bcc679187626d1cd7a63

  • SSDEEP

    3072:2jlpclfVLVQpUm/tY4enaZl2NkzwH5GJks8WYlOWe7VsayDZVZev1N:8lulfVLiyNk9zwZ9s8SZq/svL

Malware Config

Targets

    • Target

      dc2ce3e4003037b96b18d5d265d92d10_NEIKI

    • Size

      187KB

    • MD5

      dc2ce3e4003037b96b18d5d265d92d10

    • SHA1

      af296f2ca3cfa6e11fc3c840d8ab91d8973cedd8

    • SHA256

      2c9ad870a136f3eea249a1700f31f0c90d02849e3c5aa770d6ad380f3d4a63c9

    • SHA512

      c2b6e7b87ba989e2a3f9552ce47fa0fe913127abfd479d14f1cb2ca082b0019a6f5deee73fe9f9220f33ba2311b008bcf7946ddef090bcc679187626d1cd7a63

    • SSDEEP

      3072:2jlpclfVLVQpUm/tY4enaZl2NkzwH5GJks8WYlOWe7VsayDZVZev1N:8lulfVLiyNk9zwZ9s8SZq/svL

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks