Overview

overview

10

Static

static

10

3a6060e232...cs.exe

windows7-x64

10

3a6060e232...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3a6060e2328e20262687d7e05f34b420_NeikiAnalytics

  • Size

    109KB

  • Sample

    240509-p6s5laae8y

  • MD5

    3a6060e2328e20262687d7e05f34b420

  • SHA1

    d8814dce3ba3f32510de8ddfee18fa528a55a663

  • SHA256

    68e2c1efb08a00edb3656dbc7df4c878e03af164154c9940c7f129913ecd75fe

  • SHA512

    456664829c4b49109ebbdbfa4dea3453bdb12f4c209474229462c068a1ae6b1d2136c778693a46a3e97d96e52c932d0a07df6514e49d3973392d5a0d15036e53

  • SSDEEP

    3072:o7nAVGkhSswcJBv1sUJ9mLCqwzBu1DjHLMVDqqkSpR:ocVGAFBv1hJ9iwtu1DjrFqhz

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3a6060e2328e20262687d7e05f34b420_NeikiAnalytics

    • Size

      109KB

    • MD5

      3a6060e2328e20262687d7e05f34b420

    • SHA1

      d8814dce3ba3f32510de8ddfee18fa528a55a663

    • SHA256

      68e2c1efb08a00edb3656dbc7df4c878e03af164154c9940c7f129913ecd75fe

    • SHA512

      456664829c4b49109ebbdbfa4dea3453bdb12f4c209474229462c068a1ae6b1d2136c778693a46a3e97d96e52c932d0a07df6514e49d3973392d5a0d15036e53

    • SSDEEP

      3072:o7nAVGkhSswcJBv1sUJ9mLCqwzBu1DjHLMVDqqkSpR:ocVGAFBv1hJ9iwtu1DjrFqhz

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks