Overview

overview

10

Static

static

10

c6f8fb2395...cs.exe

windows7-x64

10

c6f8fb2395...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c6f8fb2395291d71b3320c8ef73eac20_NeikiAnalytics

  • Size

    96KB

  • Sample

    240514-pxwjcsff7x

  • MD5

    c6f8fb2395291d71b3320c8ef73eac20

  • SHA1

    7b22f366fe0bf234081ba064e497845d4393ad0d

  • SHA256

    2ae2bd38a28e263296e1bf55a4debaacfac6fa8915954bec51d4fa8e6ea9fd62

  • SHA512

    811c7842eccc386040083a4556c25bc7696d9a87fe5239d5c71b0d5901bbe7b27649e049f455f8accc82fb13dcdf4a6814afa3ab955a4099fd23685f37d327a5

  • SSDEEP

    1536:mDhuhebXGuATZrGekkbln+qLFyx5qHtpBOCCCCCCg78ntc2LCaIZTJ+7LhkiB0MX:mkYGfT9wmFyqROCCCCCCg6VCaMU7uihv

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c6f8fb2395291d71b3320c8ef73eac20_NeikiAnalytics

    • Size

      96KB

    • MD5

      c6f8fb2395291d71b3320c8ef73eac20

    • SHA1

      7b22f366fe0bf234081ba064e497845d4393ad0d

    • SHA256

      2ae2bd38a28e263296e1bf55a4debaacfac6fa8915954bec51d4fa8e6ea9fd62

    • SHA512

      811c7842eccc386040083a4556c25bc7696d9a87fe5239d5c71b0d5901bbe7b27649e049f455f8accc82fb13dcdf4a6814afa3ab955a4099fd23685f37d327a5

    • SSDEEP

      1536:mDhuhebXGuATZrGekkbln+qLFyx5qHtpBOCCCCCCg78ntc2LCaIZTJ+7LhkiB0MX:mkYGfT9wmFyqROCCCCCCg6VCaMU7uihv

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks