Overview

overview

10

Static

static

10

35912acbc8...cs.exe

windows7-x64

10

35912acbc8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    35912acbc8754e48797821d5a7a01f80_NeikiAnalytics

  • Size

    121KB

  • Sample

    240513-3fhstsaf22

  • MD5

    35912acbc8754e48797821d5a7a01f80

  • SHA1

    18d4e23175f757476e07ac8a43302f457f5141c5

  • SHA256

    e2b9567196a0c14ec93355d1ce88524ac6ad673a1d2c6d38fae69e59bd0431f2

  • SHA512

    c56823e51013420ac0dd53aff8cc6b2592c3f18c2e73cfd9901d34ad120e3db0cb5be363bb07f661812f24204b598c1988032c1d869f798e2e3cf11271ba72ae

  • SSDEEP

    1536:ML1AZdM3wR9kUGuj3H/mr/5D9Qyl71EqkVf1Ex9CV19zQYOd5ijJnD5ir3oGuiWP:MLi/k+H/mrLiqo1ExsO7AJnD5tvv

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      35912acbc8754e48797821d5a7a01f80_NeikiAnalytics

    • Size

      121KB

    • MD5

      35912acbc8754e48797821d5a7a01f80

    • SHA1

      18d4e23175f757476e07ac8a43302f457f5141c5

    • SHA256

      e2b9567196a0c14ec93355d1ce88524ac6ad673a1d2c6d38fae69e59bd0431f2

    • SHA512

      c56823e51013420ac0dd53aff8cc6b2592c3f18c2e73cfd9901d34ad120e3db0cb5be363bb07f661812f24204b598c1988032c1d869f798e2e3cf11271ba72ae

    • SSDEEP

      1536:ML1AZdM3wR9kUGuj3H/mr/5D9Qyl71EqkVf1Ex9CV19zQYOd5ijJnD5ir3oGuiWP:MLi/k+H/mrLiqo1ExsO7AJnD5tvv

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks