Overview

overview

10

Static

static

10

fb5478b8d2...KI.exe

windows7-x64

10

fb5478b8d2...KI.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    fb5478b8d2a475c74b894fe59f0076d0_NEIKI

  • Size

    368KB

  • Sample

    240509-fnaqvseh36

  • MD5

    fb5478b8d2a475c74b894fe59f0076d0

  • SHA1

    337559e92aa85eda2fa6d4aa46e309d9778d86d7

  • SHA256

    ec2769f3353bfb39009327e000f1cf58e448c8a8f721a67bdd3349fd5b131f68

  • SHA512

    001e55d781401ad819c61f7523a87fa08ff6e27a5bdb27d98d5c0cb664582c3befa789b32821169747c986bf88f23dc1e7e11558948381e24067d1197d956998

  • SSDEEP

    6144:F0WQBCSq5qE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJfTo9Fv:O67aAD6RrI1+lDMEAD6Rr2NWL

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      fb5478b8d2a475c74b894fe59f0076d0_NEIKI

    • Size

      368KB

    • MD5

      fb5478b8d2a475c74b894fe59f0076d0

    • SHA1

      337559e92aa85eda2fa6d4aa46e309d9778d86d7

    • SHA256

      ec2769f3353bfb39009327e000f1cf58e448c8a8f721a67bdd3349fd5b131f68

    • SHA512

      001e55d781401ad819c61f7523a87fa08ff6e27a5bdb27d98d5c0cb664582c3befa789b32821169747c986bf88f23dc1e7e11558948381e24067d1197d956998

    • SSDEEP

      6144:F0WQBCSq5qE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJfTo9Fv:O67aAD6RrI1+lDMEAD6Rr2NWL

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks