Overview

overview

10

Static

static

10

cfc3df2e75...cs.exe

windows7-x64

10

cfc3df2e75...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfc3df2e75679c7708695f9ac5004730_NeikiAnalytics

  • Size

    161KB

  • Sample

    240515-nkj45afc82

  • MD5

    cfc3df2e75679c7708695f9ac5004730

  • SHA1

    bf0f3db5a2eecaf349a0c8c89d7b323d56b11c73

  • SHA256

    0b96760ffd775c8d900cd483cd773e2cb755c4248e03c9ff1b8728886e0c7828

  • SHA512

    f40a620dbb7dd70d6f3614d00e0542c0ba1522e6523f24e5a11057c02b8ac1e6642adffc3d35e2f2cd64af98e5a2b2172f445cb69fd41b35daed5900232dc453

  • SSDEEP

    3072:qBXzqgYTHL/MxcyAlwkuVwtCJXeex7rrIRZK8K8/kv:wqgCMxcyDkuVwtmeetrIyR

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      cfc3df2e75679c7708695f9ac5004730_NeikiAnalytics

    • Size

      161KB

    • MD5

      cfc3df2e75679c7708695f9ac5004730

    • SHA1

      bf0f3db5a2eecaf349a0c8c89d7b323d56b11c73

    • SHA256

      0b96760ffd775c8d900cd483cd773e2cb755c4248e03c9ff1b8728886e0c7828

    • SHA512

      f40a620dbb7dd70d6f3614d00e0542c0ba1522e6523f24e5a11057c02b8ac1e6642adffc3d35e2f2cd64af98e5a2b2172f445cb69fd41b35daed5900232dc453

    • SSDEEP

      3072:qBXzqgYTHL/MxcyAlwkuVwtCJXeex7rrIRZK8K8/kv:wqgCMxcyDkuVwtmeetrIyR

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks