Overview

overview

10

Static

static

10

5601870b12...cs.exe

windows7-x64

10

5601870b12...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    5601870b1260384ec207919ffe57ead0_NeikiAnalytics.exe

  • Size

    276KB

  • Sample

    240516-3cft3aea74

  • MD5

    5601870b1260384ec207919ffe57ead0

  • SHA1

    c7e7bd90cef61ca2c1671ae7a11cdd77d44486d1

  • SHA256

    30a132860f6476f032db937c693c1333615dc660049e48c566c391be1f37d814

  • SHA512

    649530bc5bf2ce1999cef3897b7c7c755c7604dae46c42d25c1625dc858492398d60cce15f7a77b9437d76189de10b50753635fce497c607d505e2058c02560c

  • SSDEEP

    6144:RgeSgpN71gnXYCMztQjdVdWZHEFJ7aWN1rtMsQBOSGaF+:Rv5kXeztQjB2HEGWN1RMs1S7

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      5601870b1260384ec207919ffe57ead0_NeikiAnalytics.exe

    • Size

      276KB

    • MD5

      5601870b1260384ec207919ffe57ead0

    • SHA1

      c7e7bd90cef61ca2c1671ae7a11cdd77d44486d1

    • SHA256

      30a132860f6476f032db937c693c1333615dc660049e48c566c391be1f37d814

    • SHA512

      649530bc5bf2ce1999cef3897b7c7c755c7604dae46c42d25c1625dc858492398d60cce15f7a77b9437d76189de10b50753635fce497c607d505e2058c02560c

    • SSDEEP

      6144:RgeSgpN71gnXYCMztQjdVdWZHEFJ7aWN1rtMsQBOSGaF+:Rv5kXeztQjB2HEGWN1RMs1S7

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks