Overview

overview

10

Static

static

10

e94cb26812...cs.exe

windows7-x64

10

e94cb26812...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e94cb26812885cf7642b70e683547aa0_NeikiAnalytics

  • Size

    357KB

  • Sample

    240510-qcpqragb9y

  • MD5

    e94cb26812885cf7642b70e683547aa0

  • SHA1

    b197f592b14d57d46409d45d715598f24b6a0bd6

  • SHA256

    bb9d95175019cc12612de3acd43642cf373226a2f81103b0521af72d538139dc

  • SHA512

    d96b5ba5be37496774ce45dd915cebee8b141b3bdbd2c11bcce60914f55abbec4ea85e3643b13d8320c4547f06705463bc923b66cd699944446ffc92ced6e1bb

  • SSDEEP

    6144:749TFRFY1n6xJmPMwZoXpKtCe8AUReheFlfSZR0SvsuFrGoyeg3kl+fiXFOFLaJP:8954ZoXpKtCe1eehil6ZR5ZrQeg3kljt

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e94cb26812885cf7642b70e683547aa0_NeikiAnalytics

    • Size

      357KB

    • MD5

      e94cb26812885cf7642b70e683547aa0

    • SHA1

      b197f592b14d57d46409d45d715598f24b6a0bd6

    • SHA256

      bb9d95175019cc12612de3acd43642cf373226a2f81103b0521af72d538139dc

    • SHA512

      d96b5ba5be37496774ce45dd915cebee8b141b3bdbd2c11bcce60914f55abbec4ea85e3643b13d8320c4547f06705463bc923b66cd699944446ffc92ced6e1bb

    • SSDEEP

      6144:749TFRFY1n6xJmPMwZoXpKtCe8AUReheFlfSZR0SvsuFrGoyeg3kl+fiXFOFLaJP:8954ZoXpKtCe1eehil6ZR5ZrQeg3kljt

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks