Overview

overview

10

Static

static

10

d95c508dfc...cs.exe

windows7-x64

10

d95c508dfc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d95c508dfc241baee3c238d8e9057b80_NeikiAnalytics

  • Size

    94KB

  • Sample

    240509-x8y3maba4z

  • MD5

    d95c508dfc241baee3c238d8e9057b80

  • SHA1

    fbaf5c503e13dea56ec68fd842c6f422ae22fb8e

  • SHA256

    f2833f52cbd2a336a6104761f9d99ef42423a8536a53814a8d94d05126cce989

  • SHA512

    57d1df22f43a6e6750ced2bdc738d68da08a5b7d8fa09aa3582f2429132973b8c107f9208403cb0998089a717a754d90eb7ed23dd4f3867c3fa4bdeea5da5352

  • SSDEEP

    1536:aJSgzIBf5WKRdVm7VKXWyKvdFkWvLPHq39KUIC0uGmVJHQj1BEsCOyiKbZ9rQJg:aJSgzId5WKXACWyKvvkWvjH6KU90uGir

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d95c508dfc241baee3c238d8e9057b80_NeikiAnalytics

    • Size

      94KB

    • MD5

      d95c508dfc241baee3c238d8e9057b80

    • SHA1

      fbaf5c503e13dea56ec68fd842c6f422ae22fb8e

    • SHA256

      f2833f52cbd2a336a6104761f9d99ef42423a8536a53814a8d94d05126cce989

    • SHA512

      57d1df22f43a6e6750ced2bdc738d68da08a5b7d8fa09aa3582f2429132973b8c107f9208403cb0998089a717a754d90eb7ed23dd4f3867c3fa4bdeea5da5352

    • SSDEEP

      1536:aJSgzIBf5WKRdVm7VKXWyKvdFkWvLPHq39KUIC0uGmVJHQj1BEsCOyiKbZ9rQJg:aJSgzId5WKXACWyKvvkWvjH6KU90uGir

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks