berbew | 3260a60e65a73ad879a205214ff5ae2acf470930936c53774636102a42bcf921

General

Target

267361a6f9d171575744021ff14a4b80_NeikiAnalytics
Size

172KB
Sample

240514-zvah8agg53
MD5

267361a6f9d171575744021ff14a4b80
SHA1

f9754f4e1277fcc44f7f4197da5cfc9c05932624
SHA256

3260a60e65a73ad879a205214ff5ae2acf470930936c53774636102a42bcf921
SHA512

73f430854054bda27ce888811fc531d241f4553ee648f0e21bcb7152dfb2b8a37d93e8712f19be2b5596e0cd438d691ff1ee29cea9868022d313dc760509154d
SSDEEP

3072:EmVwRKCzG7wIxY6UT+THFLKcRaTOuNfnn4h1UiGe7r0/yTj:EmVnkG7Rx1Ui7F9RuOO48iJH0qf

Score

10^/10

Malware Config

Targets

- Target
  
  267361a6f9d171575744021ff14a4b80_NeikiAnalytics
- Size
  
  172KB
- MD5
  
  267361a6f9d171575744021ff14a4b80
- SHA1
  
  f9754f4e1277fcc44f7f4197da5cfc9c05932624
- SHA256
  
  3260a60e65a73ad879a205214ff5ae2acf470930936c53774636102a42bcf921
- SHA512
  
  73f430854054bda27ce888811fc531d241f4553ee648f0e21bcb7152dfb2b8a37d93e8712f19be2b5596e0cd438d691ff1ee29cea9868022d313dc760509154d
- SSDEEP
  
  3072:EmVwRKCzG7wIxY6UT+THFLKcRaTOuNfnn4h1UiGe7r0/yTj:EmVnkG7Rx1Ui7F9RuOO48iJH0qf
Score

10^/10

backdoor dropper evasion trojan upx
- Malware Dropper & Backdoor - Berbew
  Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
  backdoor trojan dropper
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Dropper & Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2