Overview

overview

10

Static

static

10

27dbaf7887...cs.exe

windows7-x64

10

27dbaf7887...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    27dbaf78877af1de762a40b398860010_NeikiAnalytics

  • Size

    89KB

  • Sample

    240510-ve2wbaah47

  • MD5

    27dbaf78877af1de762a40b398860010

  • SHA1

    b905e186a6391c9d27c5087cb6a7b3e7f6e5c0ce

  • SHA256

    51bc7c168a77da03bb3ce4525e116bb31a88a0a079510f5eb852ead296796392

  • SHA512

    bdd23b207480cdad2d9ae8c5f31d202f84664feb482dbbd88caea5f4d8efe275cf86b1c6a823e8aba166dc1af3b294b0c616db81423e143805cbdbe765f57736

  • SSDEEP

    1536:I9/Uce22aV+DffLkhu2eetV1WKEmtbBkK1Jq7NH3vnFyRQolD68a+VMKKTRVGFtl:I5eFhMec8yt5kJ3vnUeocr4MKy3G7UEb

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      27dbaf78877af1de762a40b398860010_NeikiAnalytics

    • Size

      89KB

    • MD5

      27dbaf78877af1de762a40b398860010

    • SHA1

      b905e186a6391c9d27c5087cb6a7b3e7f6e5c0ce

    • SHA256

      51bc7c168a77da03bb3ce4525e116bb31a88a0a079510f5eb852ead296796392

    • SHA512

      bdd23b207480cdad2d9ae8c5f31d202f84664feb482dbbd88caea5f4d8efe275cf86b1c6a823e8aba166dc1af3b294b0c616db81423e143805cbdbe765f57736

    • SSDEEP

      1536:I9/Uce22aV+DffLkhu2eetV1WKEmtbBkK1Jq7NH3vnFyRQolD68a+VMKKTRVGFtl:I5eFhMec8yt5kJ3vnUeocr4MKy3G7UEb

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks