General

  • Target

    e56903007c1ae2114b1927c2994621d0_NEIKI

  • Size

    3.7MB

  • Sample

    240509-ee9m6aca63

  • MD5

    e56903007c1ae2114b1927c2994621d0

  • SHA1

    1f4e5de8539e24dedd95b0d347d03ceabe6f3ed4

  • SHA256

    dbe5ad4b42970562743fadfde760cf0195be4b6ee9d95e6cee68b3a2bd561be7

  • SHA512

    3f928cd20330be451ebb83b2ea478181fe89403e0a95511071e45a284c4e4aa4faa8887cbdacba9ee2afa8f8500153295783959813e11c4bb3eee2e383d9a307

  • SSDEEP

    98304:+6Gn9646r6HaSHFaZRBEYyqmS2DiHPKQgm:saSHFaZRBEYyqmS2DiHPKQg

Malware Config

Targets

    • Target

      e56903007c1ae2114b1927c2994621d0_NEIKI

    • Size

      3.7MB

    • MD5

      e56903007c1ae2114b1927c2994621d0

    • SHA1

      1f4e5de8539e24dedd95b0d347d03ceabe6f3ed4

    • SHA256

      dbe5ad4b42970562743fadfde760cf0195be4b6ee9d95e6cee68b3a2bd561be7

    • SHA512

      3f928cd20330be451ebb83b2ea478181fe89403e0a95511071e45a284c4e4aa4faa8887cbdacba9ee2afa8f8500153295783959813e11c4bb3eee2e383d9a307

    • SSDEEP

      98304:+6Gn9646r6HaSHFaZRBEYyqmS2DiHPKQgm:saSHFaZRBEYyqmS2DiHPKQg

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks