Overview

overview

10

Static

static

10

091c501b3f...cs.exe

windows7-x64

10

091c501b3f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    091c501b3fe3c65940fc01292f955020_NeikiAnalytics

  • Size

    94KB

  • Sample

    240513-ybdk4abb5z

  • MD5

    091c501b3fe3c65940fc01292f955020

  • SHA1

    e381329fd58de55d674c4fb6603e5b66b078c397

  • SHA256

    bf2823f15a6585d7d3aa5595202b794d88ce6e6176cd837a92bc1b560825adc4

  • SHA512

    38ed9a598a667f44459a7c560137eaa317e596ecf70d1cef32f54ac4656bce76467dc4a2d945dc1d9f0895fbe9795dbf39c2e08a1fde267c68414f54681a16e8

  • SSDEEP

    1536:2AD/CzGDQeStZRMOzzAoBwWLLPHq39KUIC0uGmVJHQj1BEsCOyiKbZ9rQJg:hDKaDQeStAO3LwWLjH6KU90uGimj1ieK

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      091c501b3fe3c65940fc01292f955020_NeikiAnalytics

    • Size

      94KB

    • MD5

      091c501b3fe3c65940fc01292f955020

    • SHA1

      e381329fd58de55d674c4fb6603e5b66b078c397

    • SHA256

      bf2823f15a6585d7d3aa5595202b794d88ce6e6176cd837a92bc1b560825adc4

    • SHA512

      38ed9a598a667f44459a7c560137eaa317e596ecf70d1cef32f54ac4656bce76467dc4a2d945dc1d9f0895fbe9795dbf39c2e08a1fde267c68414f54681a16e8

    • SSDEEP

      1536:2AD/CzGDQeStZRMOzzAoBwWLLPHq39KUIC0uGmVJHQj1BEsCOyiKbZ9rQJg:hDKaDQeStAO3LwWLjH6KU90uGimj1ieK

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks