Overview

overview

10

Static

static

10

2748549901...cs.exe

windows7-x64

10

2748549901...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27485499012934c1c6d37fd09fa123e0_NeikiAnalytics

  • Size

    109KB

  • Sample

    240509-ns8gpaac24

  • MD5

    27485499012934c1c6d37fd09fa123e0

  • SHA1

    769441598ad284d37d92fbcbcab879a436aada0a

  • SHA256

    1f6edc2ddd548b7d1916e6b5ca4d11442b99c84f59b4b810268091fb2cbd17ab

  • SHA512

    cb16fbcab630df6793229338bea8559126aa60cad324bd92522440dde835c83cb721ed26e3d2dc3341487c89319218d139a9bd7daebfbf0080f7f3505ee30260

  • SSDEEP

    3072:BulfB2IcaSvMevu0ni5J9VLCqwzBu1DjHLMVDqqkSpR:BulfBEZvu0sJ9lwtu1DjrFqhz

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      27485499012934c1c6d37fd09fa123e0_NeikiAnalytics

    • Size

      109KB

    • MD5

      27485499012934c1c6d37fd09fa123e0

    • SHA1

      769441598ad284d37d92fbcbcab879a436aada0a

    • SHA256

      1f6edc2ddd548b7d1916e6b5ca4d11442b99c84f59b4b810268091fb2cbd17ab

    • SHA512

      cb16fbcab630df6793229338bea8559126aa60cad324bd92522440dde835c83cb721ed26e3d2dc3341487c89319218d139a9bd7daebfbf0080f7f3505ee30260

    • SSDEEP

      3072:BulfB2IcaSvMevu0ni5J9VLCqwzBu1DjHLMVDqqkSpR:BulfBEZvu0sJ9lwtu1DjrFqhz

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks