Overview

overview

10

Static

static

10

129047f496...cs.exe

windows7-x64

10

129047f496...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    129047f496862d51d73f83bf22dfe160_NeikiAnalytics

  • Size

    224KB

  • Sample

    240513-y83lgsce9s

  • MD5

    129047f496862d51d73f83bf22dfe160

  • SHA1

    ed7605844ff973c29495873af9605e87d2313954

  • SHA256

    43771a148357ee7ae2678e75b4b379f84791ae57c6f3da4d3e7c27b47549cdc5

  • SHA512

    a9141dde43fcf5aca35d61431cc41bf6dd69549c7159719b6c61064252fa192f3cb2afadc1a39e3f573dee4dfc4acb0f6a5d356ee13c25cd68ef8f9ac7bae664

  • SSDEEP

    6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwf:KUvRK4ZusQHNd1KidKjttRYLwf

Score
10/10
berbewbackdoordroppertrojanupx

Malware Config

Targets

    • Target

      129047f496862d51d73f83bf22dfe160_NeikiAnalytics

    • Size

      224KB

    • MD5

      129047f496862d51d73f83bf22dfe160

    • SHA1

      ed7605844ff973c29495873af9605e87d2313954

    • SHA256

      43771a148357ee7ae2678e75b4b379f84791ae57c6f3da4d3e7c27b47549cdc5

    • SHA512

      a9141dde43fcf5aca35d61431cc41bf6dd69549c7159719b6c61064252fa192f3cb2afadc1a39e3f573dee4dfc4acb0f6a5d356ee13c25cd68ef8f9ac7bae664

    • SSDEEP

      6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwf:KUvRK4ZusQHNd1KidKjttRYLwf

    Score
    10/10
    backdoordroppertrojanupx

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks