General

  • Target

    eae6d05bd8ed535e2827c1db07ae2ff0_NEIKI

  • Size

    89KB

  • Sample

    240509-esxkrach53

  • MD5

    eae6d05bd8ed535e2827c1db07ae2ff0

  • SHA1

    0a57a01ece53c46eedd6e1058ef97dd3f50804fc

  • SHA256

    52d9ede36fe5a3c86004ea6a9eb10f926bce9d55cf459db7173d0baccbd3a0ad

  • SHA512

    c4f9e44e62a93fdc607f978bce870bee0b398416617f19388962db43a8ea8540fc769b7cb325368b97fe4f306f9e57aff377e8e8027e12ce21c4cf619e5dba6c

  • SSDEEP

    1536:jTKCDbiaMPrQmlOKjB3GQj0ESsX5tlu1gf5viRQ6D68a+VMKKTRVGFtUhQfR1WRw:jTKsiaMPrtj2bSJbseviebr4MKy3G7Ug

Malware Config

Targets

    • Target

      eae6d05bd8ed535e2827c1db07ae2ff0_NEIKI

    • Size

      89KB

    • MD5

      eae6d05bd8ed535e2827c1db07ae2ff0

    • SHA1

      0a57a01ece53c46eedd6e1058ef97dd3f50804fc

    • SHA256

      52d9ede36fe5a3c86004ea6a9eb10f926bce9d55cf459db7173d0baccbd3a0ad

    • SHA512

      c4f9e44e62a93fdc607f978bce870bee0b398416617f19388962db43a8ea8540fc769b7cb325368b97fe4f306f9e57aff377e8e8027e12ce21c4cf619e5dba6c

    • SSDEEP

      1536:jTKCDbiaMPrQmlOKjB3GQj0ESsX5tlu1gf5viRQ6D68a+VMKKTRVGFtUhQfR1WRw:jTKsiaMPrtj2bSJbseviebr4MKy3G7Ug

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks