Overview

overview

10

Static

static

10

ef3af8219d...KI.exe

windows7-x64

10

ef3af8219d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ef3af8219d04c02cb1322f6b3b401070_NEIKI

  • Size

    492KB

  • Sample

    240509-e3e4fsaf6t

  • MD5

    ef3af8219d04c02cb1322f6b3b401070

  • SHA1

    462d6d100647c844301885a98c717f217f91aea2

  • SHA256

    1b4151d5652da83ab85d0f5b468f4aad14db2e565f648478fabbe954d5f96506

  • SHA512

    7563d68c468c26b081fabefdca8e299ed685e1650c8524a2cfb376260c760010d6013c3a0dae312e7cc60d49f0eaeb6fb6a281ea4a14678adc64a385647d888a

  • SSDEEP

    12288:fKzHgDEbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:f2Fvzecvsy

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ef3af8219d04c02cb1322f6b3b401070_NEIKI

    • Size

      492KB

    • MD5

      ef3af8219d04c02cb1322f6b3b401070

    • SHA1

      462d6d100647c844301885a98c717f217f91aea2

    • SHA256

      1b4151d5652da83ab85d0f5b468f4aad14db2e565f648478fabbe954d5f96506

    • SHA512

      7563d68c468c26b081fabefdca8e299ed685e1650c8524a2cfb376260c760010d6013c3a0dae312e7cc60d49f0eaeb6fb6a281ea4a14678adc64a385647d888a

    • SSDEEP

      12288:fKzHgDEbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:f2Fvzecvsy

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks