General

  • Target

    e9dc112e03c305466fb3801c1e8fdef0_NEIKI

  • Size

    416KB

  • Sample

    240509-eqrayscg24

  • MD5

    e9dc112e03c305466fb3801c1e8fdef0

  • SHA1

    f3f18c81df090cb6c0b916215a892b0d9cb2903e

  • SHA256

    ad80ff9d005b1de38672581d82cc3fd2fcf2cbcb79bfb1fa2ee1a6243fc3229b

  • SHA512

    b1d67b073c0979ddf50019c10baf0e46ddee10159b0626c3614fb954dfbf30c2017944c8aa8197b02c1649ec7c6c01c62cb63b896b3f363ef7b3a13d1914b260

  • SSDEEP

    12288:PTfYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:PTYJ07kE0KoFtw2gu9RxrBIUbPLwH96I

Malware Config

Targets

    • Target

      e9dc112e03c305466fb3801c1e8fdef0_NEIKI

    • Size

      416KB

    • MD5

      e9dc112e03c305466fb3801c1e8fdef0

    • SHA1

      f3f18c81df090cb6c0b916215a892b0d9cb2903e

    • SHA256

      ad80ff9d005b1de38672581d82cc3fd2fcf2cbcb79bfb1fa2ee1a6243fc3229b

    • SHA512

      b1d67b073c0979ddf50019c10baf0e46ddee10159b0626c3614fb954dfbf30c2017944c8aa8197b02c1649ec7c6c01c62cb63b896b3f363ef7b3a13d1914b260

    • SSDEEP

      12288:PTfYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:PTYJ07kE0KoFtw2gu9RxrBIUbPLwH96I

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks