Overview

overview

10

Static

static

10

b6e67b4230...cs.exe

windows7-x64

10

b6e67b4230...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b6e67b42307260fd24bcd5fd7f502db0_NeikiAnalytics

  • Size

    113KB

  • Sample

    240515-k32v4sad4w

  • MD5

    b6e67b42307260fd24bcd5fd7f502db0

  • SHA1

    2ab6e21a0b699621861d38160d016cde0f5b9be1

  • SHA256

    d9525a729b3426dcad309360e572d04b49058a670025dd49b7a19ededcd9beec

  • SHA512

    bd642d15ea7cc37c546a8f689f49855cad75c991895deb0126724314e11a8a995d9f5652117eb86cedf4adefdfdba56b4aeec6a6074575557b00e7794a0a1c5f

  • SSDEEP

    1536:1vnf23eSdsQTAqeaO617DWkZFfScD7SzCbHWrAW8wTWiliX:1eeUs+eaOuGkZFfFSebHWrH8wTW0

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b6e67b42307260fd24bcd5fd7f502db0_NeikiAnalytics

    • Size

      113KB

    • MD5

      b6e67b42307260fd24bcd5fd7f502db0

    • SHA1

      2ab6e21a0b699621861d38160d016cde0f5b9be1

    • SHA256

      d9525a729b3426dcad309360e572d04b49058a670025dd49b7a19ededcd9beec

    • SHA512

      bd642d15ea7cc37c546a8f689f49855cad75c991895deb0126724314e11a8a995d9f5652117eb86cedf4adefdfdba56b4aeec6a6074575557b00e7794a0a1c5f

    • SSDEEP

      1536:1vnf23eSdsQTAqeaO617DWkZFfScD7SzCbHWrAW8wTWiliX:1eeUs+eaOuGkZFfFSebHWrH8wTW0

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks