General

  • Target

    ea0ff3587f40f400bb15c0d42e9a9ee0_NEIKI

  • Size

    125KB

  • Sample

    240509-eq8v1acg48

  • MD5

    ea0ff3587f40f400bb15c0d42e9a9ee0

  • SHA1

    a18586e580ff1c4a71883090bbfba3f7c3d2b640

  • SHA256

    c9229e12a1e00867fc90cda426fa5761814c9721718871aa45669704d1cc7a75

  • SHA512

    e7ec68783e82649784d15d9d578469dc195df50d7b2bcde3638c1c1789d1cf40c87b9b2b66132aaea0c8287655091e95007120c633422e06451470184267d28d

  • SSDEEP

    3072:p5oim3ZcoOczBdJxNygMCa5HChScU1WdTCn93OGey/ZhJakrPF:p5xmJcoFtjVMCalChScrTCndOGeKTaG

Malware Config

Targets

    • Target

      ea0ff3587f40f400bb15c0d42e9a9ee0_NEIKI

    • Size

      125KB

    • MD5

      ea0ff3587f40f400bb15c0d42e9a9ee0

    • SHA1

      a18586e580ff1c4a71883090bbfba3f7c3d2b640

    • SHA256

      c9229e12a1e00867fc90cda426fa5761814c9721718871aa45669704d1cc7a75

    • SHA512

      e7ec68783e82649784d15d9d578469dc195df50d7b2bcde3638c1c1789d1cf40c87b9b2b66132aaea0c8287655091e95007120c633422e06451470184267d28d

    • SSDEEP

      3072:p5oim3ZcoOczBdJxNygMCa5HChScU1WdTCn93OGey/ZhJakrPF:p5xmJcoFtjVMCalChScrTCndOGeKTaG

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks