berbew | 73d806b587c0ae6963d73b34dfa7d61d4f6d005d2778214ab1c02c4154b4208d

General

Target
7dca8bfb47c078032462f946e7fa6ab0_NeikiAnalytics
Size 168KB
Sample240511-e6fjdsde2z
SHA256 73d806b587c0ae6963d73b34dfa7d61d4f6d005d2778214ab1c02c4154b4208d
MD5 7dca8bfb47c078032462f946e7fa6ab0
SHA1 62047d1e2fa815d919b556fac1484ba7c1f8e62d
SHA512 33325011ff28bc544ceb9988f95029db5ce35050b18b2cb28947794f3e93120b6e59dc2f304ff9e8f192bf757aa5f3db39a87436f3d573685d4b6853af151476
SSDEEP 1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrh:9mVwRKCbe+X5lR302U4kY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Malware Config

Targets

- Target
  7dca8bfb47c078032462f946e7fa6ab0_NeikiAnalytics
- Size 168KB
- SHA256 73d806b587c0ae6963d73b34dfa7d61d4f6d005d2778214ab1c02c4154b4208d
- MD5 7dca8bfb47c078032462f946e7fa6ab0
- SHA1 62047d1e2fa815d919b556fac1484ba7c1f8e62d
- SHA512 33325011ff28bc544ceb9988f95029db5ce35050b18b2cb28947794f3e93120b6e59dc2f304ff9e8f192bf757aa5f3db39a87436f3d573685d4b6853af151476
- SSDEEP 1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrh:9mVwRKCbe+X5lR302U4kY
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

backdoor dropper evasion trojan upx
- Malware Dropper & Backdoor - Berbew
  Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
  backdoor trojan dropper
- Modifies visibility of file extensions in Explorer
  evasion
- Drops file in Drivers directory
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Dropper & Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Drops file in Drivers directory

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2