Overview

overview

10

Static

static

10

251bb7141c...cs.exe

windows7-x64

10

251bb7141c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    251bb7141cb416a9f35639c035ae2b40_NeikiAnalytics

  • Size

    384KB

  • Sample

    240512-svjzbscc4v

  • MD5

    251bb7141cb416a9f35639c035ae2b40

  • SHA1

    8083ebd4e8c676b8a2e2b2349958ecdd017f0290

  • SHA256

    2f01d5c026d2cce25bd0c06ae052881e015378115dbf6fc23385f64daa1f6c58

  • SHA512

    0e25ad0cbb9d0ecea9e8383f15be4e5ce99115233d6c8393f02f5c676abed3c84c93bee0506a90b40715ac7ebdfaa74072fcdb4cae7bcc83a5166ca9237e5afc

  • SSDEEP

    6144:mc0Hjly/kEXsPe3wRfwKR8hDkEjiPISUOgW9X+hOGzC/NM:mBDQk4smARYU8hDkmZzcukG2/

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      251bb7141cb416a9f35639c035ae2b40_NeikiAnalytics

    • Size

      384KB

    • MD5

      251bb7141cb416a9f35639c035ae2b40

    • SHA1

      8083ebd4e8c676b8a2e2b2349958ecdd017f0290

    • SHA256

      2f01d5c026d2cce25bd0c06ae052881e015378115dbf6fc23385f64daa1f6c58

    • SHA512

      0e25ad0cbb9d0ecea9e8383f15be4e5ce99115233d6c8393f02f5c676abed3c84c93bee0506a90b40715ac7ebdfaa74072fcdb4cae7bcc83a5166ca9237e5afc

    • SSDEEP

      6144:mc0Hjly/kEXsPe3wRfwKR8hDkEjiPISUOgW9X+hOGzC/NM:mBDQk4smARYU8hDkmZzcukG2/

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks