Overview

overview

10

Static

static

10

1c8c4cf2bb...cs.exe

windows7-x64

10

1c8c4cf2bb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1c8c4cf2bb050152861f41f8310c6a60_NeikiAnalytics

  • Size

    1.1MB

  • Sample

    240509-3akp8sfh93

  • MD5

    1c8c4cf2bb050152861f41f8310c6a60

  • SHA1

    d04772613d69e78441381c1ab288ca4f6f78df51

  • SHA256

    17843c6bf20787e1002c0435ccea08200e479724395ab65e2c4e93ed25e2f781

  • SHA512

    66ac503912cefb2c54cb24133720121f9e349172f40ef1da4b8c13db4d786927dcd5c306e3460aef45bc28e634fdfb249e39df95c3f3bef8852e53c3237c8883

  • SSDEEP

    24576:Ltgp1XrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:xgp17Qg5SiLi0kEyDucEQX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1c8c4cf2bb050152861f41f8310c6a60_NeikiAnalytics

    • Size

      1.1MB

    • MD5

      1c8c4cf2bb050152861f41f8310c6a60

    • SHA1

      d04772613d69e78441381c1ab288ca4f6f78df51

    • SHA256

      17843c6bf20787e1002c0435ccea08200e479724395ab65e2c4e93ed25e2f781

    • SHA512

      66ac503912cefb2c54cb24133720121f9e349172f40ef1da4b8c13db4d786927dcd5c306e3460aef45bc28e634fdfb249e39df95c3f3bef8852e53c3237c8883

    • SSDEEP

      24576:Ltgp1XrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:xgp17Qg5SiLi0kEyDucEQX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks