Overview

overview

10

Static

static

10

89a8dc30bd...cs.exe

windows7-x64

10

89a8dc30bd...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    89a8dc30bdb219a12f6fb42d8d8c41a0_NeikiAnalytics

  • Size

    448KB

  • Sample

    240511-f93zjagb5x

  • MD5

    89a8dc30bdb219a12f6fb42d8d8c41a0

  • SHA1

    ae65e19d4c1d315fb9650b66e5a20c51b1feab38

  • SHA256

    4c561a3020b33e6a62fb7b0a0968d818a728db08613ae4ffad49481d87994e7d

  • SHA512

    e78b3cf4df5535583a6f96e81722c44079b4f96abdc6506ef61b54363d1b56888122c40977f542a4817f4a21ca88a70d65337b52c6eef6a118d8e78a0fd66c8a

  • SSDEEP

    6144:EbnqxOBC7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:CncOM7aOlxzr3cOK3TajRfXFMKNxC

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      89a8dc30bdb219a12f6fb42d8d8c41a0_NeikiAnalytics

    • Size

      448KB

    • MD5

      89a8dc30bdb219a12f6fb42d8d8c41a0

    • SHA1

      ae65e19d4c1d315fb9650b66e5a20c51b1feab38

    • SHA256

      4c561a3020b33e6a62fb7b0a0968d818a728db08613ae4ffad49481d87994e7d

    • SHA512

      e78b3cf4df5535583a6f96e81722c44079b4f96abdc6506ef61b54363d1b56888122c40977f542a4817f4a21ca88a70d65337b52c6eef6a118d8e78a0fd66c8a

    • SSDEEP

      6144:EbnqxOBC7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:CncOM7aOlxzr3cOK3TajRfXFMKNxC

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks