Overview

overview

10

Static

static

10

b244f7755e...cs.exe

windows7-x64

10

b244f7755e...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    b244f7755e754ce233ec4915b38717e0_NeikiAnalytics

  • Size

    456KB

  • Sample

    240515-kntwyshf3t

  • MD5

    b244f7755e754ce233ec4915b38717e0

  • SHA1

    294ba7d350db0e9df10774a1089e1ffc61e37bd1

  • SHA256

    e97d01195aa4eb119f3d4f8b496ee75efc548fea1d1da8afdc48a44e56c37c7d

  • SHA512

    33b6279a96348576c3a20e9192bd77825f4d14f635a6b0bea494b09e574d58d1d91969b6cdb2f315851a96ad951235e39b10d407d1c9cc9342683ad9adbca6d1

  • SSDEEP

    12288:nOwWwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:/WwFfDy/phgeczlqczZd7LFB3oFHoGn+

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b244f7755e754ce233ec4915b38717e0_NeikiAnalytics

    • Size

      456KB

    • MD5

      b244f7755e754ce233ec4915b38717e0

    • SHA1

      294ba7d350db0e9df10774a1089e1ffc61e37bd1

    • SHA256

      e97d01195aa4eb119f3d4f8b496ee75efc548fea1d1da8afdc48a44e56c37c7d

    • SHA512

      33b6279a96348576c3a20e9192bd77825f4d14f635a6b0bea494b09e574d58d1d91969b6cdb2f315851a96ad951235e39b10d407d1c9cc9342683ad9adbca6d1

    • SSDEEP

      12288:nOwWwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdm:/WwFfDy/phgeczlqczZd7LFB3oFHoGn+

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks