Overview

overview

10

Static

static

10

c07e32853e...cs.exe

windows7-x64

10

c07e32853e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c07e32853e00a1283d64c4d71612b650_NeikiAnalytics

  • Size

    115KB

  • Sample

    240513-wnkttsha35

  • MD5

    c07e32853e00a1283d64c4d71612b650

  • SHA1

    fa5546d92b0ab714737a0a66ba9abfbf8ece7dc7

  • SHA256

    090186ed8137d8da82b17c9f115b5ff247f43e2f2bb91f25db288ef98eacb9a2

  • SHA512

    5b1d0d93166747b7552bdf9b6eb5a693cb487b5261ba288b1f1a376b620065361a979724f3ce83a78f7f1e2cbf071ef10bda899bd73d88b8bb440e553302775f

  • SSDEEP

    3072:rffXA9zPe1oLMwdbrIR/SoQUP5u30KqTKr4:rBRwhrIooQUPoDqTKE

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c07e32853e00a1283d64c4d71612b650_NeikiAnalytics

    • Size

      115KB

    • MD5

      c07e32853e00a1283d64c4d71612b650

    • SHA1

      fa5546d92b0ab714737a0a66ba9abfbf8ece7dc7

    • SHA256

      090186ed8137d8da82b17c9f115b5ff247f43e2f2bb91f25db288ef98eacb9a2

    • SHA512

      5b1d0d93166747b7552bdf9b6eb5a693cb487b5261ba288b1f1a376b620065361a979724f3ce83a78f7f1e2cbf071ef10bda899bd73d88b8bb440e553302775f

    • SSDEEP

      3072:rffXA9zPe1oLMwdbrIR/SoQUP5u30KqTKr4:rBRwhrIooQUPoDqTKE

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks