Overview

overview

10

Static

static

10

07fb3584c1...cs.exe

windows7-x64

10

07fb3584c1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    07fb3584c19b07520c75557a663bbb80_NeikiAnalytics

  • Size

    556KB

  • Sample

    240513-x7sjfsbf96

  • MD5

    07fb3584c19b07520c75557a663bbb80

  • SHA1

    b586eed0ebf9b46a0d87cb61cd855725c11adce8

  • SHA256

    cdae8000b2bd65e26eec5ec0bab56923c0635fe6fc2d3a0c726bb8eafbd4808e

  • SHA512

    a8ca1661b81cff2233d89c4aafec67dd2081cf699dd32b920f89ca544917097767e5f8226e02c1bf3b7e7747e983c0ce23738f454b9dd463314d2b9a79753953

  • SSDEEP

    12288:PqJ8O7aOlxzr3cOK3TajRfXFMKNxr9Z7tEGVqT4Df:PM8O7aOlxzLyTajRfXFMKNxr9Z7tEGVJ

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      07fb3584c19b07520c75557a663bbb80_NeikiAnalytics

    • Size

      556KB

    • MD5

      07fb3584c19b07520c75557a663bbb80

    • SHA1

      b586eed0ebf9b46a0d87cb61cd855725c11adce8

    • SHA256

      cdae8000b2bd65e26eec5ec0bab56923c0635fe6fc2d3a0c726bb8eafbd4808e

    • SHA512

      a8ca1661b81cff2233d89c4aafec67dd2081cf699dd32b920f89ca544917097767e5f8226e02c1bf3b7e7747e983c0ce23738f454b9dd463314d2b9a79753953

    • SSDEEP

      12288:PqJ8O7aOlxzr3cOK3TajRfXFMKNxr9Z7tEGVqT4Df:PM8O7aOlxzLyTajRfXFMKNxr9Z7tEGVJ

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks