Overview

overview

10

Static

static

10

4ce3a41deb...cs.exe

windows7-x64

10

4ce3a41deb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4ce3a41deb2d38cce01eead7c891fe10_NeikiAnalytics

  • Size

    182KB

  • Sample

    240510-xrr8race4t

  • MD5

    4ce3a41deb2d38cce01eead7c891fe10

  • SHA1

    6b2eccf3309b2b1f22b413fbb93177b8507de768

  • SHA256

    759c9410dec3e4e2d84453e6a09a0efdb3a7ab9fcb26622f96e653c916fa3ac4

  • SHA512

    18d3dd25c60b4aaa563192960f0c6fd3624bce57538b07f1cc5cd136c7dd8529f2496cec811b85bcb1a19ee3fa0bf6c74e563cd8f1586a6eadb1764ce2c4cc3f

  • SSDEEP

    3072:idEUfKj8BYbDiC1ZTK7sxtLUIGST78jUVTyxhnMGnOkl5c:iUSiZTK40E8UVwpnOSc

Score
10/10
berbewbackdoordroppertrojanupx

Malware Config

Targets

    • Target

      4ce3a41deb2d38cce01eead7c891fe10_NeikiAnalytics

    • Size

      182KB

    • MD5

      4ce3a41deb2d38cce01eead7c891fe10

    • SHA1

      6b2eccf3309b2b1f22b413fbb93177b8507de768

    • SHA256

      759c9410dec3e4e2d84453e6a09a0efdb3a7ab9fcb26622f96e653c916fa3ac4

    • SHA512

      18d3dd25c60b4aaa563192960f0c6fd3624bce57538b07f1cc5cd136c7dd8529f2496cec811b85bcb1a19ee3fa0bf6c74e563cd8f1586a6eadb1764ce2c4cc3f

    • SSDEEP

      3072:idEUfKj8BYbDiC1ZTK7sxtLUIGST78jUVTyxhnMGnOkl5c:iUSiZTK40E8UVwpnOSc

    Score
    10/10
    backdoordroppertrojanupx

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks