General

  • Target

    e749d6b8b712e748520393325ff0ba90_NEIKI

  • Size

    378KB

  • Sample

    240509-ejznrahe3s

  • MD5

    e749d6b8b712e748520393325ff0ba90

  • SHA1

    d15ab26fb41f1a54e93ef09ef9aa354121a27dda

  • SHA256

    8b283a0a051de15cbd4429db4717366b754906c735ed5bc6d7d8aef28e69d263

  • SHA512

    05276c85f9ff68f5bf7493e5dbdb18c3f65f048946d31bf9e0c91f12ebeb36449af3becd73fd55125a7cd84d2c66b6786bdda5dd293232272fc45d3e0ea382f0

  • SSDEEP

    6144:5oX1fEeFEOeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:5sr2OeYr75lTefkY660fIaDZkY660f28

Malware Config

Targets

    • Target

      e749d6b8b712e748520393325ff0ba90_NEIKI

    • Size

      378KB

    • MD5

      e749d6b8b712e748520393325ff0ba90

    • SHA1

      d15ab26fb41f1a54e93ef09ef9aa354121a27dda

    • SHA256

      8b283a0a051de15cbd4429db4717366b754906c735ed5bc6d7d8aef28e69d263

    • SHA512

      05276c85f9ff68f5bf7493e5dbdb18c3f65f048946d31bf9e0c91f12ebeb36449af3becd73fd55125a7cd84d2c66b6786bdda5dd293232272fc45d3e0ea382f0

    • SSDEEP

      6144:5oX1fEeFEOeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:5sr2OeYr75lTefkY660fIaDZkY660f28

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks