Overview

overview

10

Static

static

10

2bcfea0228...cs.exe

windows7-x64

10

2bcfea0228...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2bcfea022803e63262bd1017e69eb670_NeikiAnalytics

  • Size

    135KB

  • Sample

    240510-apf2dafg7y

  • MD5

    2bcfea022803e63262bd1017e69eb670

  • SHA1

    592ca362fcdead2878f5c5415985a4944e329738

  • SHA256

    24f12888b33e3270272b62b75577e92f68076b7b12b4c720b80bef4e0225bb12

  • SHA512

    6b01580daf1fd6a62a7dbff01b712f0342a72332d7888d0cca1de565c556865b54b76821ea7ee5dc59f1eb7e4c2137af65006d0ede9d64ea21a1d6c554178397

  • SSDEEP

    3072:BDzmpGETQO9hToK8Qr5+ViKGe7Yfs0a0Uoi:BDzmtQO9hToK9cViK4fs0l

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2bcfea022803e63262bd1017e69eb670_NeikiAnalytics

    • Size

      135KB

    • MD5

      2bcfea022803e63262bd1017e69eb670

    • SHA1

      592ca362fcdead2878f5c5415985a4944e329738

    • SHA256

      24f12888b33e3270272b62b75577e92f68076b7b12b4c720b80bef4e0225bb12

    • SHA512

      6b01580daf1fd6a62a7dbff01b712f0342a72332d7888d0cca1de565c556865b54b76821ea7ee5dc59f1eb7e4c2137af65006d0ede9d64ea21a1d6c554178397

    • SSDEEP

      3072:BDzmpGETQO9hToK8Qr5+ViKGe7Yfs0a0Uoi:BDzmtQO9hToK9cViK4fs0l

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks