Overview

overview

10

Static

static

10

a3aa12b6eb...KI.exe

windows7-x64

10

a3aa12b6eb...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a3aa12b6eb8821521927e056478e5de0_NEIKI

  • Size

    664KB

  • Sample

    240508-3x28sseg6v

  • MD5

    a3aa12b6eb8821521927e056478e5de0

  • SHA1

    e30b7a8efd1429c44dea5b1120c1c66577abca8d

  • SHA256

    2246806e148a935aea23d61de2e5babf03236fb8b64d911bbfd20892df071276

  • SHA512

    b161937cc77af280c4a7505f723526677485190c73fb6ecb3ea686d5630511e7f7cb9d7ea3923093abcb8734dd575cf7b96ebca0413b2556512413c90bfa4dce

  • SSDEEP

    12288:9/r6XvpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:pGfW4XWleKWNUir2MhNl6zX3w9As/xOX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      a3aa12b6eb8821521927e056478e5de0_NEIKI

    • Size

      664KB

    • MD5

      a3aa12b6eb8821521927e056478e5de0

    • SHA1

      e30b7a8efd1429c44dea5b1120c1c66577abca8d

    • SHA256

      2246806e148a935aea23d61de2e5babf03236fb8b64d911bbfd20892df071276

    • SHA512

      b161937cc77af280c4a7505f723526677485190c73fb6ecb3ea686d5630511e7f7cb9d7ea3923093abcb8734dd575cf7b96ebca0413b2556512413c90bfa4dce

    • SSDEEP

      12288:9/r6XvpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:pGfW4XWleKWNUir2MhNl6zX3w9As/xOX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks