Overview

overview

10

Static

static

10

e1b417b591...cs.exe

windows7-x64

10

e1b417b591...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e1b417b591896bd78bb8a1f1a1601ed0_NeikiAnalytics

  • Size

    448KB

  • Sample

    240509-ymst6aef84

  • MD5

    e1b417b591896bd78bb8a1f1a1601ed0

  • SHA1

    b8bc83e0611ba1f94256ba97cc4229dc0e40ab99

  • SHA256

    268593a6a2d696e9b1b4d8be245f955a4647d58350eaf288752c5e24f16579d9

  • SHA512

    c2bc7574d4d84ccfcbd8a90692ee2783c47dcfc71a3967529370edf90c2e3fec225526e5c5af338b9b79d6355573deb4cbc0650654b13bfec5ef09c3de8a1d29

  • SSDEEP

    6144:n48vvbV5mqB7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:48v2W7aOlxzr3cOK3TajRfXFMKNxC

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e1b417b591896bd78bb8a1f1a1601ed0_NeikiAnalytics

    • Size

      448KB

    • MD5

      e1b417b591896bd78bb8a1f1a1601ed0

    • SHA1

      b8bc83e0611ba1f94256ba97cc4229dc0e40ab99

    • SHA256

      268593a6a2d696e9b1b4d8be245f955a4647d58350eaf288752c5e24f16579d9

    • SHA512

      c2bc7574d4d84ccfcbd8a90692ee2783c47dcfc71a3967529370edf90c2e3fec225526e5c5af338b9b79d6355573deb4cbc0650654b13bfec5ef09c3de8a1d29

    • SSDEEP

      6144:n48vvbV5mqB7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:48v2W7aOlxzr3cOK3TajRfXFMKNxC

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks