General

  • Target

    e7e0c5fa60813abd490e1f1da5b32a10_NEIKI

  • Size

    1020KB

  • Sample

    240509-elaseahe9w

  • MD5

    e7e0c5fa60813abd490e1f1da5b32a10

  • SHA1

    d6609c10410ba03ec0dd987ea717eab143abbf5b

  • SHA256

    26732314125f0780ffb6c33e3f7fa73434339508f8b374de71facce0137080c0

  • SHA512

    24bb41dbb548df4ec9ef40a8a70d211d7572f0d05bc32ba7e0cfb0a3f72e3949040e624f7c056e8bc200a66897424c76fef16cc933d7c35ec8802755293328ff

  • SSDEEP

    24576:bZIgPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZT:bC6bazR0vKLXh

Malware Config

Targets

    • Target

      e7e0c5fa60813abd490e1f1da5b32a10_NEIKI

    • Size

      1020KB

    • MD5

      e7e0c5fa60813abd490e1f1da5b32a10

    • SHA1

      d6609c10410ba03ec0dd987ea717eab143abbf5b

    • SHA256

      26732314125f0780ffb6c33e3f7fa73434339508f8b374de71facce0137080c0

    • SHA512

      24bb41dbb548df4ec9ef40a8a70d211d7572f0d05bc32ba7e0cfb0a3f72e3949040e624f7c056e8bc200a66897424c76fef16cc933d7c35ec8802755293328ff

    • SSDEEP

      24576:bZIgPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZT:bC6bazR0vKLXh

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks