Overview

overview

10

Static

static

10

c6ad8f7168...cs.exe

windows7-x64

10

c6ad8f7168...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6ad8f716854f60c7e10706a838fd530_NeikiAnalytics

  • Size

    89KB

  • Sample

    240509-xd2j9shc2w

  • MD5

    c6ad8f716854f60c7e10706a838fd530

  • SHA1

    82b334be0f3b34822c0b8ecc7a5341dfd243721a

  • SHA256

    985ac0e1c9af6c588cda32c6dcd6bf3bc78fa5d86f6f96b733da2548475a1518

  • SHA512

    9699c38c8499881b45adebaf41191c005aa50752d439c5c3ac8566c5873f61b95fa2d69dedd2a35794e4021587d258b8813d581de1d7aa0bcb0b8520324d4175

  • SSDEEP

    1536:PfTyBtOmuf05OvKiP/yVcuiY2MLJ/Ljc666666KZ7lWpcCRQ0SD68a+VMKKTRVGR:Rnf0EvKIqVLP1TjDJWpcCe0Dr4MKy3Gn

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c6ad8f716854f60c7e10706a838fd530_NeikiAnalytics

    • Size

      89KB

    • MD5

      c6ad8f716854f60c7e10706a838fd530

    • SHA1

      82b334be0f3b34822c0b8ecc7a5341dfd243721a

    • SHA256

      985ac0e1c9af6c588cda32c6dcd6bf3bc78fa5d86f6f96b733da2548475a1518

    • SHA512

      9699c38c8499881b45adebaf41191c005aa50752d439c5c3ac8566c5873f61b95fa2d69dedd2a35794e4021587d258b8813d581de1d7aa0bcb0b8520324d4175

    • SSDEEP

      1536:PfTyBtOmuf05OvKiP/yVcuiY2MLJ/Ljc666666KZ7lWpcCRQ0SD68a+VMKKTRVGR:Rnf0EvKIqVLP1TjDJWpcCe0Dr4MKy3Gn

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks