Overview

overview

10

Static

static

10

18d9d192e3...cs.exe

windows7-x64

10

18d9d192e3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    18d9d192e3882184ab93ae9f124c8400_NeikiAnalytics

  • Size

    128KB

  • Sample

    240513-zsb92ade6s

  • MD5

    18d9d192e3882184ab93ae9f124c8400

  • SHA1

    e55d88268bee1ca559619be305c69c7cc5587f67

  • SHA256

    37a1fd00ef04f43e2ce86870a1ae9c0ef1c80a67fa65635883a639c1ffc958a1

  • SHA512

    e7f8129fcced98867d7da6e5e3010410720609f9446b785831c04273d7fbadba37f4e590e4b6b8be72c441071381a5ebc18aac4f84982457b1be1dc3fadfe20c

  • SSDEEP

    3072:1jIjGJFGQQB7A0el4WkWs6FEYtdZCwGtLItkiXOBSLhoMrdGB8rVl:Eq/CDX4EYtCwGtMtkiXOoloMr1Jl

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      18d9d192e3882184ab93ae9f124c8400_NeikiAnalytics

    • Size

      128KB

    • MD5

      18d9d192e3882184ab93ae9f124c8400

    • SHA1

      e55d88268bee1ca559619be305c69c7cc5587f67

    • SHA256

      37a1fd00ef04f43e2ce86870a1ae9c0ef1c80a67fa65635883a639c1ffc958a1

    • SHA512

      e7f8129fcced98867d7da6e5e3010410720609f9446b785831c04273d7fbadba37f4e590e4b6b8be72c441071381a5ebc18aac4f84982457b1be1dc3fadfe20c

    • SSDEEP

      3072:1jIjGJFGQQB7A0el4WkWs6FEYtdZCwGtLItkiXOBSLhoMrdGB8rVl:Eq/CDX4EYtCwGtMtkiXOoloMr1Jl

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks