Overview

overview

10

Static

static

10

058717f14c...cs.exe

windows7-x64

10

058717f14c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    058717f14c509ef8bead142b2f4c3540_NeikiAnalytics

  • Size

    113KB

  • Sample

    240511-p4frgsgg2t

  • MD5

    058717f14c509ef8bead142b2f4c3540

  • SHA1

    a7b16c99e5316f29cef231287fd750430d1adc29

  • SHA256

    6657179c4c03b4b84b1be9e459873809523a3428680ea92eb54b870ab810fcd8

  • SHA512

    44883a29dda0ce24970b86fb85b3f9f7063779fc0c59b402efd1803a16becd24e5d1eae75305c25e9bc33f8222e88625ddc44c53f752e5f7533e2ba65ebbdb6e

  • SSDEEP

    3072:TtzQVj044ds38OuGkZFfFSebHWrH8wTW0:TtzQy6R7otSeWrP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      058717f14c509ef8bead142b2f4c3540_NeikiAnalytics

    • Size

      113KB

    • MD5

      058717f14c509ef8bead142b2f4c3540

    • SHA1

      a7b16c99e5316f29cef231287fd750430d1adc29

    • SHA256

      6657179c4c03b4b84b1be9e459873809523a3428680ea92eb54b870ab810fcd8

    • SHA512

      44883a29dda0ce24970b86fb85b3f9f7063779fc0c59b402efd1803a16becd24e5d1eae75305c25e9bc33f8222e88625ddc44c53f752e5f7533e2ba65ebbdb6e

    • SSDEEP

      3072:TtzQVj044ds38OuGkZFfFSebHWrH8wTW0:TtzQy6R7otSeWrP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks