Overview

overview

10

Static

static

10

33e5840bc2...cs.exe

windows7-x64

10

33e5840bc2...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    33e5840bc294034d3a792583b01c0280_NeikiAnalytics

  • Size

    664KB

  • Sample

    240510-v76pzahc8y

  • MD5

    33e5840bc294034d3a792583b01c0280

  • SHA1

    4cddefa15414031c7e52359d1c381de82a19f61c

  • SHA256

    cd5de0b69424dd07a3ad74afcce32abef27b097499d4dda0446c4f00bf3bb991

  • SHA512

    d0900e998dbfa08d2e9e59d4fb0a7822ee942946211a77f640071edb0cbdceb5b3960154ddb415024d7385407c110bd6a8af5b5def55aa7a14ede65804e66e98

  • SSDEEP

    12288:9/qRdIvpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYx:eOW4XWleKWNUir2MhNl6zX3w9As/xO2k

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      33e5840bc294034d3a792583b01c0280_NeikiAnalytics

    • Size

      664KB

    • MD5

      33e5840bc294034d3a792583b01c0280

    • SHA1

      4cddefa15414031c7e52359d1c381de82a19f61c

    • SHA256

      cd5de0b69424dd07a3ad74afcce32abef27b097499d4dda0446c4f00bf3bb991

    • SHA512

      d0900e998dbfa08d2e9e59d4fb0a7822ee942946211a77f640071edb0cbdceb5b3960154ddb415024d7385407c110bd6a8af5b5def55aa7a14ede65804e66e98

    • SSDEEP

      12288:9/qRdIvpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYx:eOW4XWleKWNUir2MhNl6zX3w9As/xO2k

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks