Overview

overview

10

Static

static

10

13230f7daf...cs.exe

windows7-x64

10

13230f7daf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    13230f7daf21d5da6b21ba92683c5830_NeikiAnalytics

  • Size

    329KB

  • Sample

    240512-qgasdsbb89

  • MD5

    13230f7daf21d5da6b21ba92683c5830

  • SHA1

    663c72330e6dbe0b995fbd9d080d489f3d2007a9

  • SHA256

    c2f44a00a2dac107b0d949a4b38f656f49f33221803fbfb42e3faf7353eaa891

  • SHA512

    fdaf56948cd2f7ad5147edc5f06b5fb98d0ffb9756266a44d9e9d2d94cc05916ffdaf2f7975ca6abe5188b686480e571a7fa4f6458a099b9ec4c1c62383811e6

  • SSDEEP

    6144:hiBZtvZws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:37LKQweY0sam38vZwIBIE1+J3pQtI

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      13230f7daf21d5da6b21ba92683c5830_NeikiAnalytics

    • Size

      329KB

    • MD5

      13230f7daf21d5da6b21ba92683c5830

    • SHA1

      663c72330e6dbe0b995fbd9d080d489f3d2007a9

    • SHA256

      c2f44a00a2dac107b0d949a4b38f656f49f33221803fbfb42e3faf7353eaa891

    • SHA512

      fdaf56948cd2f7ad5147edc5f06b5fb98d0ffb9756266a44d9e9d2d94cc05916ffdaf2f7975ca6abe5188b686480e571a7fa4f6458a099b9ec4c1c62383811e6

    • SSDEEP

      6144:hiBZtvZws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:37LKQweY0sam38vZwIBIE1+J3pQtI

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks