Overview

overview

10

Static

static

10

3708b51776...cs.exe

windows7-x64

10

3708b51776...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3708b51776c84e2b095b5e868c919160_NeikiAnalytics

  • Size

    161KB

  • Sample

    240509-p126badb49

  • MD5

    3708b51776c84e2b095b5e868c919160

  • SHA1

    2ac92b7bff1dfa5b85ad721f42965fbe1f819a35

  • SHA256

    0283e429573e0876a4fee79f805404f5d060fcc462fcfe34bb9ca755a5daefc4

  • SHA512

    cb68a31846e279f75f71169256a7edd88581ef01f6a958d407fc813a51125d91342fe95c757fdcd5d770e7e26f7540cb3892a5571c07414f6106883633c6b219

  • SSDEEP

    3072:Tuy9Oh0cE+M07Zw1b5NYk4VwtCJXeex7rrIRZK8K8/kv:TFOhQbwk4VwtmeetrIyR

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3708b51776c84e2b095b5e868c919160_NeikiAnalytics

    • Size

      161KB

    • MD5

      3708b51776c84e2b095b5e868c919160

    • SHA1

      2ac92b7bff1dfa5b85ad721f42965fbe1f819a35

    • SHA256

      0283e429573e0876a4fee79f805404f5d060fcc462fcfe34bb9ca755a5daefc4

    • SHA512

      cb68a31846e279f75f71169256a7edd88581ef01f6a958d407fc813a51125d91342fe95c757fdcd5d770e7e26f7540cb3892a5571c07414f6106883633c6b219

    • SSDEEP

      3072:Tuy9Oh0cE+M07Zw1b5NYk4VwtCJXeex7rrIRZK8K8/kv:TFOhQbwk4VwtmeetrIyR

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks