Overview

overview

10

Static

static

10

de2563c0c9...cs.exe

windows7-x64

10

de2563c0c9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    de2563c0c91369d662c24646132f7d90_NeikiAnalytics

  • Size

    366KB

  • Sample

    240509-ygny1sbd51

  • MD5

    de2563c0c91369d662c24646132f7d90

  • SHA1

    c9fe554d80ec42986b1abb4b8026f47ad401cfd7

  • SHA256

    3729c44c819ad4265b5537fb96ab539e0c01c2528e02bba3583adaafcb5618c9

  • SHA512

    7f2badd3a98e65391ebbc997f7b194b67757c683cb153c2ac13b9adacfbc9ea626b4d44e1bb6d9765119762e4d86ea48e78e2e205a9c2e512b3763c9460c1caa

  • SSDEEP

    6144:dSiKyzg8v5LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:pBJZoivKv32XXf9Do3+IviD

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      de2563c0c91369d662c24646132f7d90_NeikiAnalytics

    • Size

      366KB

    • MD5

      de2563c0c91369d662c24646132f7d90

    • SHA1

      c9fe554d80ec42986b1abb4b8026f47ad401cfd7

    • SHA256

      3729c44c819ad4265b5537fb96ab539e0c01c2528e02bba3583adaafcb5618c9

    • SHA512

      7f2badd3a98e65391ebbc997f7b194b67757c683cb153c2ac13b9adacfbc9ea626b4d44e1bb6d9765119762e4d86ea48e78e2e205a9c2e512b3763c9460c1caa

    • SSDEEP

      6144:dSiKyzg8v5LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:pBJZoivKv32XXf9Do3+IviD

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks