Overview

overview

10

Static

static

10

08927b0d7d...KI.exe

windows7-x64

10

08927b0d7d...KI.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    08927b0d7dac7ba7ea0c093ca420d550_NEIKI

  • Size

    138KB

  • Sample

    240509-lafmvaae61

  • MD5

    08927b0d7dac7ba7ea0c093ca420d550

  • SHA1

    ee3545543dda1223de7be819da9e59268ba09d25

  • SHA256

    823ebffaa8d1b7897b2548c4fd504c77d5ba482a5a2caf98b4b75d19224d177b

  • SHA512

    3da06ffff5d1b095a865fa91f165aa73d19b788d00cf198666f2df0498d9e65d9cd0f429d8090f821faac74d6b5597fe13ebac1372fb5f2718aa2471e8a4d58c

  • SSDEEP

    3072:n8lu4sSL626/uwfCXamW2wS7IrHrY8pjq6:n4sSLG/usCqmHwMOH/Vz

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      08927b0d7dac7ba7ea0c093ca420d550_NEIKI

    • Size

      138KB

    • MD5

      08927b0d7dac7ba7ea0c093ca420d550

    • SHA1

      ee3545543dda1223de7be819da9e59268ba09d25

    • SHA256

      823ebffaa8d1b7897b2548c4fd504c77d5ba482a5a2caf98b4b75d19224d177b

    • SHA512

      3da06ffff5d1b095a865fa91f165aa73d19b788d00cf198666f2df0498d9e65d9cd0f429d8090f821faac74d6b5597fe13ebac1372fb5f2718aa2471e8a4d58c

    • SSDEEP

      3072:n8lu4sSL626/uwfCXamW2wS7IrHrY8pjq6:n4sSLG/usCqmHwMOH/Vz

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks