Overview

overview

10

Static

static

10

70f1a61061...cs.exe

windows7-x64

10

70f1a61061...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    70f1a61061d6ad0fe97568a2dd3ab600_NeikiAnalytics

  • Size

    113KB

  • Sample

    240512-f7se1sec33

  • MD5

    70f1a61061d6ad0fe97568a2dd3ab600

  • SHA1

    0753c4c19473d3856b547d9353c4892a69b5028d

  • SHA256

    46ef5ccc730cbf093a164b7a2e9583aaca05c14e4422e15748d64788df23797b

  • SHA512

    9f2e2d386301901ab8856f07a7c5413293215e211acfa973cd7b16df97ca7a9100d6ace2f24b551f64373d7ca0979eee3ba1473ec3846256f9a9638fa8db900a

  • SSDEEP

    3072:cnHbwYnaN/A/OrPOuGkZFfFSebHWrH8wTW0:cndKs427otSeWrP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      70f1a61061d6ad0fe97568a2dd3ab600_NeikiAnalytics

    • Size

      113KB

    • MD5

      70f1a61061d6ad0fe97568a2dd3ab600

    • SHA1

      0753c4c19473d3856b547d9353c4892a69b5028d

    • SHA256

      46ef5ccc730cbf093a164b7a2e9583aaca05c14e4422e15748d64788df23797b

    • SHA512

      9f2e2d386301901ab8856f07a7c5413293215e211acfa973cd7b16df97ca7a9100d6ace2f24b551f64373d7ca0979eee3ba1473ec3846256f9a9638fa8db900a

    • SSDEEP

      3072:cnHbwYnaN/A/OrPOuGkZFfFSebHWrH8wTW0:cndKs427otSeWrP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks