Overview

overview

10

Static

static

10

1904eb3421...KI.exe

windows7-x64

10

1904eb3421...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1904eb34215ddceed753e1ffd3fee370_NEIKI

  • Size

    3.2MB

  • Sample

    240508-xyl1baag91

  • MD5

    1904eb34215ddceed753e1ffd3fee370

  • SHA1

    71e58bbf0a83d42ff8fc44c36892a3b918eb1db2

  • SHA256

    27badcc572514985b6b5551980dfedf19721fa0d07a72bd0bd65a29fca15d158

  • SHA512

    500c23d46e41cb50c8c4a1f56cea9cb40277d627563650b5e2cfc67afab594c4e3925f5724f6d66f3d9edb7813ee0dd0cd1dd4b1c21d67cde5132ba06d508cd8

  • SSDEEP

    98304:BelBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NTPKnllYUugy:slBFLPj3JStuv40ar7zrbDlsa2VIlPW+

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1904eb34215ddceed753e1ffd3fee370_NEIKI

    • Size

      3.2MB

    • MD5

      1904eb34215ddceed753e1ffd3fee370

    • SHA1

      71e58bbf0a83d42ff8fc44c36892a3b918eb1db2

    • SHA256

      27badcc572514985b6b5551980dfedf19721fa0d07a72bd0bd65a29fca15d158

    • SHA512

      500c23d46e41cb50c8c4a1f56cea9cb40277d627563650b5e2cfc67afab594c4e3925f5724f6d66f3d9edb7813ee0dd0cd1dd4b1c21d67cde5132ba06d508cd8

    • SSDEEP

      98304:BelBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NTPKnllYUugy:slBFLPj3JStuv40ar7zrbDlsa2VIlPW+

    Score
    10/10
    backdoordroppertrojanpersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks