Overview

overview

10

Static

static

10

5bbd9816be...cs.exe

windows7-x64

10

5bbd9816be...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bbd9816be41347b7821c1c46cd86bc0_NeikiAnalytics

  • Size

    300KB

  • Sample

    240515-b2tzfaah3x

  • MD5

    5bbd9816be41347b7821c1c46cd86bc0

  • SHA1

    2a844129dd1fc61d273c276375f0f845bbc89841

  • SHA256

    71fff8e94f8d7556addd6a73e9ea6fdfb6cc62e46add7b27bee3791288dd19cc

  • SHA512

    d08f88e4552aef49bedc91d00e442b78bfc42e6de278e50337d37f48a1ac0820e4f00ea140e540c1e5de971b6f5fd5941ffbc95ae48d89b4420356effc70866b

  • SSDEEP

    6144:27cUcrBqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:jUIymCjb87g4/c

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      5bbd9816be41347b7821c1c46cd86bc0_NeikiAnalytics

    • Size

      300KB

    • MD5

      5bbd9816be41347b7821c1c46cd86bc0

    • SHA1

      2a844129dd1fc61d273c276375f0f845bbc89841

    • SHA256

      71fff8e94f8d7556addd6a73e9ea6fdfb6cc62e46add7b27bee3791288dd19cc

    • SHA512

      d08f88e4552aef49bedc91d00e442b78bfc42e6de278e50337d37f48a1ac0820e4f00ea140e540c1e5de971b6f5fd5941ffbc95ae48d89b4420356effc70866b

    • SSDEEP

      6144:27cUcrBqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:jUIymCjb87g4/c

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks