Overview

overview

10

Static

static

10

3c6f855ed6...cs.exe

windows7-x64

10

3c6f855ed6...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3c6f855ed6a7306d02914e2c1931b450_NeikiAnalytics

  • Size

    448KB

  • Sample

    240509-p9xl7adg22

  • MD5

    3c6f855ed6a7306d02914e2c1931b450

  • SHA1

    b8781689a30ac560ba7cd56b39db69fbe5065e35

  • SHA256

    647a7c4cdd765efd917869c419f895d477aed0e8faf610f199f887096e38c645

  • SHA512

    9587a6dcbe4b33c481506f27b01124f1406c245a6e2c161b3dcb6034df966727e8e585b9b86f86c8b0400dd5a6008f4a3d5c07ebdde5e77678ea8f4766824759

  • SSDEEP

    6144:p92+Kz3LlCRgLG7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzk:p92jz8O67aOlxzr3cOK3TajRfXFMKNxC

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3c6f855ed6a7306d02914e2c1931b450_NeikiAnalytics

    • Size

      448KB

    • MD5

      3c6f855ed6a7306d02914e2c1931b450

    • SHA1

      b8781689a30ac560ba7cd56b39db69fbe5065e35

    • SHA256

      647a7c4cdd765efd917869c419f895d477aed0e8faf610f199f887096e38c645

    • SHA512

      9587a6dcbe4b33c481506f27b01124f1406c245a6e2c161b3dcb6034df966727e8e585b9b86f86c8b0400dd5a6008f4a3d5c07ebdde5e77678ea8f4766824759

    • SSDEEP

      6144:p92+Kz3LlCRgLG7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzk:p92jz8O67aOlxzr3cOK3TajRfXFMKNxC

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks