Overview

overview

10

Static

static

10

b41cce388a...KI.exe

windows7-x64

10

b41cce388a...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b41cce388ab412baf8d9e29c1236a300_NEIKI

  • Size

    130KB

  • Sample

    240509-a9w84abg25

  • MD5

    b41cce388ab412baf8d9e29c1236a300

  • SHA1

    d1843088541731d46865667629db88634c38300b

  • SHA256

    7f98eee0677ecbc4b2a1c30a67ef43495542be5968123ec2db42d1ae3394d99a

  • SHA512

    192d04d6fd7768517a2ead8d65cd37b5228c5f076491093cece8b1a8987c29668f1ec718be0bd430d0dc4f677274a714913e546ca87b12dab3a7b7affd1f48a8

  • SSDEEP

    3072:16PgvjnwOxylllllloqWF/R4G02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:qgbnwOxylllllloqWF/R4v4BhHmNEcYT

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b41cce388ab412baf8d9e29c1236a300_NEIKI

    • Size

      130KB

    • MD5

      b41cce388ab412baf8d9e29c1236a300

    • SHA1

      d1843088541731d46865667629db88634c38300b

    • SHA256

      7f98eee0677ecbc4b2a1c30a67ef43495542be5968123ec2db42d1ae3394d99a

    • SHA512

      192d04d6fd7768517a2ead8d65cd37b5228c5f076491093cece8b1a8987c29668f1ec718be0bd430d0dc4f677274a714913e546ca87b12dab3a7b7affd1f48a8

    • SSDEEP

      3072:16PgvjnwOxylllllloqWF/R4G02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:qgbnwOxylllllloqWF/R4v4BhHmNEcYT

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks