Overview

overview

10

Static

static

10

d7d7f721e5...cs.exe

windows7-x64

10

d7d7f721e5...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d7d7f721e531ab6e118882e907293530_NeikiAnalytics

  • Size

    482KB

  • Sample

    240509-x6r7asah6s

  • MD5

    d7d7f721e531ab6e118882e907293530

  • SHA1

    a43f49a714558f9c5625c46fb6fc266434298b7e

  • SHA256

    c13139e26a5d2805e3552900bf54287209600f2b9410f3abd813d751c3a84b65

  • SHA512

    c105d5f214d0e2564844ce036db2a27f041c0afa720f1b7bd970ad3e94328e7c6808e5028a5d9a0c70329f2d0b1c790059f1dee309d4c64937764c4acecef759

  • SSDEEP

    12288:JgXJSLrpV6yYP4rbpV6yYPg058KpV6yYP8OThj:JgXJSLrW4XWleKW8OThj

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d7d7f721e531ab6e118882e907293530_NeikiAnalytics

    • Size

      482KB

    • MD5

      d7d7f721e531ab6e118882e907293530

    • SHA1

      a43f49a714558f9c5625c46fb6fc266434298b7e

    • SHA256

      c13139e26a5d2805e3552900bf54287209600f2b9410f3abd813d751c3a84b65

    • SHA512

      c105d5f214d0e2564844ce036db2a27f041c0afa720f1b7bd970ad3e94328e7c6808e5028a5d9a0c70329f2d0b1c790059f1dee309d4c64937764c4acecef759

    • SSDEEP

      12288:JgXJSLrpV6yYP4rbpV6yYPg058KpV6yYP8OThj:JgXJSLrW4XWleKW8OThj

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks