Overview

overview

10

Static

static

10

29bdc30b67...cs.exe

windows7-x64

10

29bdc30b67...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    29bdc30b67fb4c35093f9fbc3decf4e0_NeikiAnalytics

  • Size

    94KB

  • Sample

    240511-xbpspabh3s

  • MD5

    29bdc30b67fb4c35093f9fbc3decf4e0

  • SHA1

    284e8c31b8d19cc3acc1f4312e5b7bb08a2d4ca9

  • SHA256

    ee710e12a9d1e25ac42a17bcfe8c72de26851b7e4fd43ffe58ebbebc364f2398

  • SHA512

    35047aa790909561546e0bc30485b8d645df16a86631bbe996831693bdea0fa3a1c1ad8e34c5c3abe1ce760ce4ad8fb2ec834117c015c14f2c59349a35c08bc5

  • SSDEEP

    1536:FiDAPTb2il6PB6C69abwpto8FNr2jRl+Q3EnzRQD4qRfRa9HprmRfRZ:g0bxkBz6o0o8FNr2jD+1zeD4q5wkpv

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      29bdc30b67fb4c35093f9fbc3decf4e0_NeikiAnalytics

    • Size

      94KB

    • MD5

      29bdc30b67fb4c35093f9fbc3decf4e0

    • SHA1

      284e8c31b8d19cc3acc1f4312e5b7bb08a2d4ca9

    • SHA256

      ee710e12a9d1e25ac42a17bcfe8c72de26851b7e4fd43ffe58ebbebc364f2398

    • SHA512

      35047aa790909561546e0bc30485b8d645df16a86631bbe996831693bdea0fa3a1c1ad8e34c5c3abe1ce760ce4ad8fb2ec834117c015c14f2c59349a35c08bc5

    • SSDEEP

      1536:FiDAPTb2il6PB6C69abwpto8FNr2jRl+Q3EnzRQD4qRfRa9HprmRfRZ:g0bxkBz6o0o8FNr2jD+1zeD4q5wkpv

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks