Overview

overview

10

Static

static

10

c863ca06ad...cs.exe

windows7-x64

10

c863ca06ad...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c863ca06add76a915ccfdfd5fbdfac80_NeikiAnalytics

  • Size

    89KB

  • Sample

    240514-qng52shb92

  • MD5

    c863ca06add76a915ccfdfd5fbdfac80

  • SHA1

    baab47c0595742b5912c0d9bf6ff10a07ff9fa03

  • SHA256

    9289a2807fdf0c0cda3e91c9dba941ac61a806151cec35cd928d90e17bf94714

  • SHA512

    dda0ef4a213caf99865b3189e6e3b5d9388d7013785771ac56c33021e41a6a4661a6d9d0be4a032191acb013098b7f5d8657170ba132191bd3790f02cfceb623

  • SSDEEP

    1536:C4sqkqBdbcVdH0zo0p7Riu67AVRQ1D68a+VMKKTRVGFtUhQfR1WRaROR8R:Nsq//bcV90zo0p7RiuLVesr4MKy3G7Ug

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c863ca06add76a915ccfdfd5fbdfac80_NeikiAnalytics

    • Size

      89KB

    • MD5

      c863ca06add76a915ccfdfd5fbdfac80

    • SHA1

      baab47c0595742b5912c0d9bf6ff10a07ff9fa03

    • SHA256

      9289a2807fdf0c0cda3e91c9dba941ac61a806151cec35cd928d90e17bf94714

    • SHA512

      dda0ef4a213caf99865b3189e6e3b5d9388d7013785771ac56c33021e41a6a4661a6d9d0be4a032191acb013098b7f5d8657170ba132191bd3790f02cfceb623

    • SSDEEP

      1536:C4sqkqBdbcVdH0zo0p7Riu67AVRQ1D68a+VMKKTRVGFtUhQfR1WRaROR8R:Nsq//bcV90zo0p7RiuLVesr4MKy3G7Ug

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks