General

  • Target

    e7adb10013c45c18571ad791274a5780_NEIKI

  • Size

    438KB

  • Sample

    240509-ekn9eahe7s

  • MD5

    e7adb10013c45c18571ad791274a5780

  • SHA1

    daf4e9e009fc43fd0ae7506a05158e23d67d87f5

  • SHA256

    30e82de31aec632092aed5bdf19302135ed23ec1aa0df99f7fd50586cd70b026

  • SHA512

    18ebd2982dc6f23cd98df412c63b507b9f3884e662f2b34757d2147b4bdab43a86cb7116e823166d8b3a7e082f57f867febac2aa9ec90da2ab361435dbfc9339

  • SSDEEP

    12288:p82TYapJoTYapbt1S3vwyjrU+LKYAJIIfvBN7wWubiFpcxK9:pRnJunbt1S3vwyjrU+LKYAJIIfvBN7w8

Malware Config

Targets

    • Target

      e7adb10013c45c18571ad791274a5780_NEIKI

    • Size

      438KB

    • MD5

      e7adb10013c45c18571ad791274a5780

    • SHA1

      daf4e9e009fc43fd0ae7506a05158e23d67d87f5

    • SHA256

      30e82de31aec632092aed5bdf19302135ed23ec1aa0df99f7fd50586cd70b026

    • SHA512

      18ebd2982dc6f23cd98df412c63b507b9f3884e662f2b34757d2147b4bdab43a86cb7116e823166d8b3a7e082f57f867febac2aa9ec90da2ab361435dbfc9339

    • SSDEEP

      12288:p82TYapJoTYapbt1S3vwyjrU+LKYAJIIfvBN7wWubiFpcxK9:pRnJunbt1S3vwyjrU+LKYAJIIfvBN7w8

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks