Overview

overview

10

Static

static

10

08ce691513...KI.exe

windows7-x64

10

08ce691513...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    08ce6915132afb7a3af79f1914d609c0_NEIKI

  • Size

    276KB

  • Sample

    240508-h7hlxsha3x

  • MD5

    08ce6915132afb7a3af79f1914d609c0

  • SHA1

    28dc89fbe062c0e7280d1031c7c1070aaeedf640

  • SHA256

    284e129f6208947de1ef373183a67ed322e62f275fbd600d9128cfc932b2db8d

  • SHA512

    8ef16fc2dac649fde99c9c9fc832220d20ac76573b078693d575800fb1ddbdb3d22a915ad98b772f450af56673bc1e119dd73bab16c54f67b483c65e36e46586

  • SSDEEP

    6144:8AbEcU0lZ/0xdWZHEFJ7aWN1rtMsQBOSGaF+:hEClZe2HEGWN1RMs1S7

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      08ce6915132afb7a3af79f1914d609c0_NEIKI

    • Size

      276KB

    • MD5

      08ce6915132afb7a3af79f1914d609c0

    • SHA1

      28dc89fbe062c0e7280d1031c7c1070aaeedf640

    • SHA256

      284e129f6208947de1ef373183a67ed322e62f275fbd600d9128cfc932b2db8d

    • SHA512

      8ef16fc2dac649fde99c9c9fc832220d20ac76573b078693d575800fb1ddbdb3d22a915ad98b772f450af56673bc1e119dd73bab16c54f67b483c65e36e46586

    • SSDEEP

      6144:8AbEcU0lZ/0xdWZHEFJ7aWN1rtMsQBOSGaF+:hEClZe2HEGWN1RMs1S7

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks