Overview

overview

10

Static

static

10

b6e8783825...cs.exe

windows7-x64

10

b6e8783825...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b6e8783825ab9f463097c890fc0bfdf0_NeikiAnalytics

  • Size

    208KB

  • Sample

    240513-pcgvgadh9y

  • MD5

    b6e8783825ab9f463097c890fc0bfdf0

  • SHA1

    3753702969b0f9bbc0c9dca8dba4ececf146a20a

  • SHA256

    524a758fc70c14993800358241050c8613df4d7ea2d284e0c50a034ddaa08391

  • SHA512

    b5e984a8aa54b6b47f25f3657d2ea2b0038422467fb5412a6824240a482ec4a138ea4d58b75151468ac4bf9c07ad2193833377d9f508572e9ed9d66687cbac4d

  • SSDEEP

    6144:jUao5JD6acDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55KmC:g5EMChtMtkM71r1MSXqPix55Kx

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b6e8783825ab9f463097c890fc0bfdf0_NeikiAnalytics

    • Size

      208KB

    • MD5

      b6e8783825ab9f463097c890fc0bfdf0

    • SHA1

      3753702969b0f9bbc0c9dca8dba4ececf146a20a

    • SHA256

      524a758fc70c14993800358241050c8613df4d7ea2d284e0c50a034ddaa08391

    • SHA512

      b5e984a8aa54b6b47f25f3657d2ea2b0038422467fb5412a6824240a482ec4a138ea4d58b75151468ac4bf9c07ad2193833377d9f508572e9ed9d66687cbac4d

    • SSDEEP

      6144:jUao5JD6acDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55KmC:g5EMChtMtkM71r1MSXqPix55Kx

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks