Overview

overview

10

Static

static

10

ebf40f084b...cs.exe

windows7-x64

10

ebf40f084b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebf40f084bec019aedcef8615e5daeb0_NeikiAnalytics

  • Size

    94KB

  • Sample

    240509-y526jscg5z

  • MD5

    ebf40f084bec019aedcef8615e5daeb0

  • SHA1

    7e274c28400c62e1118672f18a3c9b6fbe5fca75

  • SHA256

    064769443b61f10848549b1c20c5b4e8593ba71f1141b6d53d042d05e8ab57d9

  • SHA512

    45a604690741b95430e76d96c2e376695230b16c9c13d543c20c570a95ad396186b7e7fba103de7d6da67bfb1783d2515125fa6995309e6d6a5e23b728ef7473

  • SSDEEP

    1536:NnMoVYM7fksB3svI1oJTZGKiy70B2L4aIZTJ+7LhkiB0MPiKeEAgv:NnHr7fkq3svdZiy70a4aMU7uihJ5v

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ebf40f084bec019aedcef8615e5daeb0_NeikiAnalytics

    • Size

      94KB

    • MD5

      ebf40f084bec019aedcef8615e5daeb0

    • SHA1

      7e274c28400c62e1118672f18a3c9b6fbe5fca75

    • SHA256

      064769443b61f10848549b1c20c5b4e8593ba71f1141b6d53d042d05e8ab57d9

    • SHA512

      45a604690741b95430e76d96c2e376695230b16c9c13d543c20c570a95ad396186b7e7fba103de7d6da67bfb1783d2515125fa6995309e6d6a5e23b728ef7473

    • SSDEEP

      1536:NnMoVYM7fksB3svI1oJTZGKiy70B2L4aIZTJ+7LhkiB0MPiKeEAgv:NnHr7fkq3svdZiy70a4aMU7uihJ5v

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks