Overview

overview

10

Static

static

10

6ae6d2b82a...cs.exe

windows7-x64

10

6ae6d2b82a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6ae6d2b82a53e9532fa77c6f5075be80_NeikiAnalytics

  • Size

    448KB

  • Sample

    240512-e69ggagg6w

  • MD5

    6ae6d2b82a53e9532fa77c6f5075be80

  • SHA1

    93ad2191252772ff02d7987827507405ae5dd693

  • SHA256

    fef7c57fb4e56cfde8589f88dbcb2a3e78037deaba42641532fddb6d9b76b39e

  • SHA512

    9b6f4fa7362d3c1cf8f595535942b9cb96e5d029b4be19c7bcd03d5b349197c2669e6a35a4eda91b3e458c2ed8a6ef6e5db2b499c91e2348a2c87c29361e2d28

  • SSDEEP

    12288:g5LnHv3SA7aOlxzr3cOK3TajRfXFMKNxC:g5LB7aOlxzLyTajRfXFMKNxC

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      6ae6d2b82a53e9532fa77c6f5075be80_NeikiAnalytics

    • Size

      448KB

    • MD5

      6ae6d2b82a53e9532fa77c6f5075be80

    • SHA1

      93ad2191252772ff02d7987827507405ae5dd693

    • SHA256

      fef7c57fb4e56cfde8589f88dbcb2a3e78037deaba42641532fddb6d9b76b39e

    • SHA512

      9b6f4fa7362d3c1cf8f595535942b9cb96e5d029b4be19c7bcd03d5b349197c2669e6a35a4eda91b3e458c2ed8a6ef6e5db2b499c91e2348a2c87c29361e2d28

    • SSDEEP

      12288:g5LnHv3SA7aOlxzr3cOK3TajRfXFMKNxC:g5LB7aOlxzLyTajRfXFMKNxC

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks