Overview

overview

10

Static

static

10

538d03890f...KI.exe

windows7-x64

10

538d03890f...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    538d03890fe41037ea8231f2e583e980_NEIKI

  • Size

    208KB

  • Sample

    240508-lwrx1aef9s

  • MD5

    538d03890fe41037ea8231f2e583e980

  • SHA1

    ece9210a488d437e01470095940c8adcad9a2d36

  • SHA256

    f90a6ffa7a94fc215305c1e893ade2158eba658954a3f66e9664e90e85d4febb

  • SHA512

    5cd6af31a1010dc27eeeedd1a51a76dec00bcac15316c8f91b26aa4900d6968325488c2d97f62b87cd39964b1841a4c1934bdcd5ec174039c153a5aa001d2864

  • SSDEEP

    6144:/yR3SMFHwnDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55KmC:/ygyChtMtkM71r1MSXqPix55Kx

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      538d03890fe41037ea8231f2e583e980_NEIKI

    • Size

      208KB

    • MD5

      538d03890fe41037ea8231f2e583e980

    • SHA1

      ece9210a488d437e01470095940c8adcad9a2d36

    • SHA256

      f90a6ffa7a94fc215305c1e893ade2158eba658954a3f66e9664e90e85d4febb

    • SHA512

      5cd6af31a1010dc27eeeedd1a51a76dec00bcac15316c8f91b26aa4900d6968325488c2d97f62b87cd39964b1841a4c1934bdcd5ec174039c153a5aa001d2864

    • SSDEEP

      6144:/yR3SMFHwnDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55KmC:/ygyChtMtkM71r1MSXqPix55Kx

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks