Overview

overview

10

Static

static

10

16dfd1a29a...cs.exe

windows7-x64

10

16dfd1a29a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    16dfd1a29a5b513265521dc4931211d0_NeikiAnalytics

  • Size

    1.2MB

  • Sample

    240511-ta2jbaec7t

  • MD5

    16dfd1a29a5b513265521dc4931211d0

  • SHA1

    d61856580a2fdafb1d650fdead95c766ff65e773

  • SHA256

    c50d09baf5a28094f8fb9deb7559b1984de3cbbbb6571d4f0421b88ae3c29b61

  • SHA512

    edd6ab1a5a26d03d388bc02a6dfda60e92dd720a42377272944cc15300b721a01f3c4bfcbc276ffc79e24f2fb69ed32681d2a118f832e14576713e95b5035399

  • SSDEEP

    12288:yFDKtYlFiWZCXwpnsKvNA+XTvZHWuEo3oWiQ4ca:ciYlFiWZpsKv2EvZHp3oWiQ4ca

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      16dfd1a29a5b513265521dc4931211d0_NeikiAnalytics

    • Size

      1.2MB

    • MD5

      16dfd1a29a5b513265521dc4931211d0

    • SHA1

      d61856580a2fdafb1d650fdead95c766ff65e773

    • SHA256

      c50d09baf5a28094f8fb9deb7559b1984de3cbbbb6571d4f0421b88ae3c29b61

    • SHA512

      edd6ab1a5a26d03d388bc02a6dfda60e92dd720a42377272944cc15300b721a01f3c4bfcbc276ffc79e24f2fb69ed32681d2a118f832e14576713e95b5035399

    • SSDEEP

      12288:yFDKtYlFiWZCXwpnsKvNA+XTvZHWuEo3oWiQ4ca:ciYlFiWZpsKv2EvZHp3oWiQ4ca

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks