Overview

overview

10

Static

static

10

b4c5e6e462...cs.exe

windows7-x64

10

b4c5e6e462...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b4c5e6e462330a4b391bc4ac18ca0450_NeikiAnalytics

  • Size

    640KB

  • Sample

    240513-nfzc9ada46

  • MD5

    b4c5e6e462330a4b391bc4ac18ca0450

  • SHA1

    88ca6a713489fd4811943db910b6373dd96a7292

  • SHA256

    54d834b77fa90d38b17e5b052703b6bb2514d9a076d0602d1ffbacd28e21d33c

  • SHA512

    59d53e0aa820a31bdbb952ca1bffa41b758167d2182c70b57b152417d02db03ffa5f589a3249c6a7dc6efd638b4c26bf30f07701ca604ac1d0cc3bc7331d2f50

  • SSDEEP

    12288:BV7pdXHaINIVIIVy2oIvPKiK13fS2hEYM9RIPk:BV7pdXHfNIVIIVy2jU13fS2hEYM9RIPk

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b4c5e6e462330a4b391bc4ac18ca0450_NeikiAnalytics

    • Size

      640KB

    • MD5

      b4c5e6e462330a4b391bc4ac18ca0450

    • SHA1

      88ca6a713489fd4811943db910b6373dd96a7292

    • SHA256

      54d834b77fa90d38b17e5b052703b6bb2514d9a076d0602d1ffbacd28e21d33c

    • SHA512

      59d53e0aa820a31bdbb952ca1bffa41b758167d2182c70b57b152417d02db03ffa5f589a3249c6a7dc6efd638b4c26bf30f07701ca604ac1d0cc3bc7331d2f50

    • SSDEEP

      12288:BV7pdXHaINIVIIVy2oIvPKiK13fS2hEYM9RIPk:BV7pdXHfNIVIIVy2jU13fS2hEYM9RIPk

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks