Overview

overview

10

Static

static

10

ae12fdf362...cs.exe

windows7-x64

10

ae12fdf362...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ae12fdf3627a32a7873a7a4c82acc260_NeikiAnalytics

  • Size

    378KB

  • Sample

    240513-lcdk9shb66

  • MD5

    ae12fdf3627a32a7873a7a4c82acc260

  • SHA1

    5e0bd2523cf810c8b7640961ca2ffbb8402f36f0

  • SHA256

    f16389b21c27ae15734ca91d715f942129fade45419cccb20aea2b94aa04a3a8

  • SHA512

    9eebb3233ca65813cc892252de909ef6e7e4a77e9fe8771c918af4135e9722500e4702ee17097dfabc0007450efaf69255bf7df3026ae9cb71c26a32005c593e

  • SSDEEP

    6144:u1r5dkcMprtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0lLn5:uIRMsEat9pG4l+0K7WHT91M52vVAMq5U

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ae12fdf3627a32a7873a7a4c82acc260_NeikiAnalytics

    • Size

      378KB

    • MD5

      ae12fdf3627a32a7873a7a4c82acc260

    • SHA1

      5e0bd2523cf810c8b7640961ca2ffbb8402f36f0

    • SHA256

      f16389b21c27ae15734ca91d715f942129fade45419cccb20aea2b94aa04a3a8

    • SHA512

      9eebb3233ca65813cc892252de909ef6e7e4a77e9fe8771c918af4135e9722500e4702ee17097dfabc0007450efaf69255bf7df3026ae9cb71c26a32005c593e

    • SSDEEP

      6144:u1r5dkcMprtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0lLn5:uIRMsEat9pG4l+0K7WHT91M52vVAMq5U

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks