Overview

overview

10

Static

static

10

a66283768b...KI.exe

windows7-x64

10

a66283768b...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a66283768bd939c6daf38cbfddb52c20_NEIKI

  • Size

    492KB

  • Sample

    240509-adjm5afc6x

  • MD5

    a66283768bd939c6daf38cbfddb52c20

  • SHA1

    b3a4c80bc7988488a3fd5c87adaa56fc6510dea7

  • SHA256

    b3a57c8dec33ff5e7b5421ee11490e4b041ae73c89de3bdcce0cbc2d6c29df3a

  • SHA512

    5bd6f112d21c27ab4609b434edda16682e7bae25d046ee7b8c490de411aab63a9e296d5139ee59c002c9c15ca1f5b964cdfd1eb12e6c320de30073a97b709d9f

  • SSDEEP

    12288:HPdPj4bWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:vpUvzecvsy

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      a66283768bd939c6daf38cbfddb52c20_NEIKI

    • Size

      492KB

    • MD5

      a66283768bd939c6daf38cbfddb52c20

    • SHA1

      b3a4c80bc7988488a3fd5c87adaa56fc6510dea7

    • SHA256

      b3a57c8dec33ff5e7b5421ee11490e4b041ae73c89de3bdcce0cbc2d6c29df3a

    • SHA512

      5bd6f112d21c27ab4609b434edda16682e7bae25d046ee7b8c490de411aab63a9e296d5139ee59c002c9c15ca1f5b964cdfd1eb12e6c320de30073a97b709d9f

    • SSDEEP

      12288:HPdPj4bWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:vpUvzecvsy

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks