Overview

overview

10

Static

static

10

46bf9044c8...cs.exe

windows7-x64

10

46bf9044c8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    46bf9044c882d01b8243c810617be100_NeikiAnalytics

  • Size

    135KB

  • Sample

    240509-qqwffsbh3x

  • MD5

    46bf9044c882d01b8243c810617be100

  • SHA1

    235c3f19749f407225935f18172d6989a3e9057a

  • SHA256

    741937ab53f1876e783988e356b3b420775c94b810e18c2d9f2b4124b5a33d69

  • SHA512

    527bedb060d57835b53a290b19ee3ccd7c1ee060c103e3ff06bf445420a47c51117a35e484d1c2e0aab7a844cae1f6cc371645c57c7fbf4bb14f5389e87c8a2f

  • SSDEEP

    3072:hMicD/JcvF9W+tDTyHK8Qr5+ViKGe7Yfs0a0Uoi:Kp0TAK9cViK4fs0l

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      46bf9044c882d01b8243c810617be100_NeikiAnalytics

    • Size

      135KB

    • MD5

      46bf9044c882d01b8243c810617be100

    • SHA1

      235c3f19749f407225935f18172d6989a3e9057a

    • SHA256

      741937ab53f1876e783988e356b3b420775c94b810e18c2d9f2b4124b5a33d69

    • SHA512

      527bedb060d57835b53a290b19ee3ccd7c1ee060c103e3ff06bf445420a47c51117a35e484d1c2e0aab7a844cae1f6cc371645c57c7fbf4bb14f5389e87c8a2f

    • SSDEEP

      3072:hMicD/JcvF9W+tDTyHK8Qr5+ViKGe7Yfs0a0Uoi:Kp0TAK9cViK4fs0l

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks