General

  • Target

    e8b64c91c7da1ca20fcfae4a18fb45f0_NEIKI

  • Size

    487KB

  • Sample

    240509-em4rwace63

  • MD5

    e8b64c91c7da1ca20fcfae4a18fb45f0

  • SHA1

    5afa7e7f25e6e732229046c79f35ce52f4418bd4

  • SHA256

    880f3ac05da15e058c78ae1a40edea1381345041fc83151576495163c32532ea

  • SHA512

    6e2eba647c9b6a15f67f140b05adb734f0658a6d5fcba472fc11b13a842beda022f750f5d3681c55543995e1c651cf112c7a075f93c92bad23d2ce702a269fdd

  • SSDEEP

    12288:XkucpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:uWHWZ0PVdvcY9+8hk5DtJNBcL/C10dqz

Malware Config

Targets

    • Target

      e8b64c91c7da1ca20fcfae4a18fb45f0_NEIKI

    • Size

      487KB

    • MD5

      e8b64c91c7da1ca20fcfae4a18fb45f0

    • SHA1

      5afa7e7f25e6e732229046c79f35ce52f4418bd4

    • SHA256

      880f3ac05da15e058c78ae1a40edea1381345041fc83151576495163c32532ea

    • SHA512

      6e2eba647c9b6a15f67f140b05adb734f0658a6d5fcba472fc11b13a842beda022f750f5d3681c55543995e1c651cf112c7a075f93c92bad23d2ce702a269fdd

    • SSDEEP

      12288:XkucpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:uWHWZ0PVdvcY9+8hk5DtJNBcL/C10dqz

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks