Overview

overview

10

Static

static

10

3e75d0687d...cs.exe

windows7-x64

10

3e75d0687d...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3e75d0687df0394cb931a1d766b61a80_NeikiAnalytics

  • Size

    229KB

  • Sample

    240510-wv7xyadg27

  • MD5

    3e75d0687df0394cb931a1d766b61a80

  • SHA1

    f97ba5456575a04dd41ff62b9817eebedc5bc1e4

  • SHA256

    82aab9d70703b1ce563acb4faa78b547d63605a9e66401e3c51630c172751b65

  • SHA512

    95d1882b1f5a3ad8919df71fafdd1b02b04efe453fc2d6bf7670057c95ce0b3a488c0650640a5b1763a2c4db8bc5a1f8e5ead1664019f5db7c3caf0d2a7c72df

  • SSDEEP

    6144:W9ivdONle9dlAc8mT271+HZ/pvkym/89bYEwPhCKvav:Kicgo37AIfFfvav

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3e75d0687df0394cb931a1d766b61a80_NeikiAnalytics

    • Size

      229KB

    • MD5

      3e75d0687df0394cb931a1d766b61a80

    • SHA1

      f97ba5456575a04dd41ff62b9817eebedc5bc1e4

    • SHA256

      82aab9d70703b1ce563acb4faa78b547d63605a9e66401e3c51630c172751b65

    • SHA512

      95d1882b1f5a3ad8919df71fafdd1b02b04efe453fc2d6bf7670057c95ce0b3a488c0650640a5b1763a2c4db8bc5a1f8e5ead1664019f5db7c3caf0d2a7c72df

    • SSDEEP

      6144:W9ivdONle9dlAc8mT271+HZ/pvkym/89bYEwPhCKvav:Kicgo37AIfFfvav

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks