Overview

overview

10

Static

static

10

b4a60c1f46...cs.exe

windows7-x64

10

b4a60c1f46...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4a60c1f461cee6e80dc4eff34fb7eb0_NeikiAnalytics

  • Size

    362KB

  • Sample

    240513-ndcrgabh6x

  • MD5

    b4a60c1f461cee6e80dc4eff34fb7eb0

  • SHA1

    bb5ac51d5875e10bfef84570d28475a42afaaabd

  • SHA256

    c45d6e7defc75662588b5406215445d1071470ada4c8975b6171b31f9ef03976

  • SHA512

    8f04557715ce975dc9899b40d6deb5c6c61ee4dd2ca8a31f93e75b74205577b8e5fad0f5897bf7da10a2a60cf336cd3c35ee0e906a438db8c641e207b1477152

  • SSDEEP

    6144:asX5KwltGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxriEl/:jJKWtmuMtrQ07nGWxWSsmiMyh95r5OPS

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b4a60c1f461cee6e80dc4eff34fb7eb0_NeikiAnalytics

    • Size

      362KB

    • MD5

      b4a60c1f461cee6e80dc4eff34fb7eb0

    • SHA1

      bb5ac51d5875e10bfef84570d28475a42afaaabd

    • SHA256

      c45d6e7defc75662588b5406215445d1071470ada4c8975b6171b31f9ef03976

    • SHA512

      8f04557715ce975dc9899b40d6deb5c6c61ee4dd2ca8a31f93e75b74205577b8e5fad0f5897bf7da10a2a60cf336cd3c35ee0e906a438db8c641e207b1477152

    • SSDEEP

      6144:asX5KwltGDuMEUrQVad7nG3mbDp2o+SsmiMyhtHEyr5psPc1aj8DOvlvuZxriEl/:jJKWtmuMtrQ07nGWxWSsmiMyh95r5OPS

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks