Overview

overview

10

Static

static

10

1ab9d1216f...cs.exe

windows7-x64

10

1ab9d1216f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1ab9d1216f9720664a2327f2420a34c0_NeikiAnalytics

  • Size

    227KB

  • Sample

    240509-254wxsfe76

  • MD5

    1ab9d1216f9720664a2327f2420a34c0

  • SHA1

    71980acee9ab5340c242c2fe59cfbd676cc11a98

  • SHA256

    65a2226f46718294553f741965ecf8cbb88f898eaddfba56abb96b4e569a6209

  • SHA512

    c0b76a44dd4da6056de1ebf26c85d367053881a76e9e185edc6d62c43f0b790d317f3d913253b234e6e897379798b389a00ef020bf26803a9a6636e478b784af

  • SSDEEP

    6144:SOhfM9zhClP4SXnm7U5j2QE2+g24Id2jFHu:SyqVClP4Giojj+Td20

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1ab9d1216f9720664a2327f2420a34c0_NeikiAnalytics

    • Size

      227KB

    • MD5

      1ab9d1216f9720664a2327f2420a34c0

    • SHA1

      71980acee9ab5340c242c2fe59cfbd676cc11a98

    • SHA256

      65a2226f46718294553f741965ecf8cbb88f898eaddfba56abb96b4e569a6209

    • SHA512

      c0b76a44dd4da6056de1ebf26c85d367053881a76e9e185edc6d62c43f0b790d317f3d913253b234e6e897379798b389a00ef020bf26803a9a6636e478b784af

    • SSDEEP

      6144:SOhfM9zhClP4SXnm7U5j2QE2+g24Id2jFHu:SyqVClP4Giojj+Td20

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks