Overview

overview

10

Static

static

10

e22326b6a9...cs.exe

windows7-x64

10

e22326b6a9...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e22326b6a9beb0ba0d2896c3a3dc2650_NeikiAnalytics

  • Size

    121KB

  • Sample

    240516-rwdy2ahb51

  • MD5

    e22326b6a9beb0ba0d2896c3a3dc2650

  • SHA1

    1bcfdef6f5d7aa97a6c9f03c9032026cde0a2d93

  • SHA256

    14d47fdd3fa03499b3e5d38337875fcfc3c51e1079bbe1c8431880e9e893e4d6

  • SHA512

    461a27c9d1a698b3bb7c32c0886a2b21b64d9984a2e8b1fa28ffb6b33a8f65666c40821af5a362404b3d5e2b27da6be998ac8b887c17250a990eec2ed730f0c7

  • SSDEEP

    1536:JYK87vA95rJ+Vhj3Yy7Lyf+WMBgpVFeuJNyRCV19zQYOd5ijJnD5ir3oGuiWDD:+K0Al/6Ly2VgNyoO7AJnD5tvv

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e22326b6a9beb0ba0d2896c3a3dc2650_NeikiAnalytics

    • Size

      121KB

    • MD5

      e22326b6a9beb0ba0d2896c3a3dc2650

    • SHA1

      1bcfdef6f5d7aa97a6c9f03c9032026cde0a2d93

    • SHA256

      14d47fdd3fa03499b3e5d38337875fcfc3c51e1079bbe1c8431880e9e893e4d6

    • SHA512

      461a27c9d1a698b3bb7c32c0886a2b21b64d9984a2e8b1fa28ffb6b33a8f65666c40821af5a362404b3d5e2b27da6be998ac8b887c17250a990eec2ed730f0c7

    • SSDEEP

      1536:JYK87vA95rJ+Vhj3Yy7Lyf+WMBgpVFeuJNyRCV19zQYOd5ijJnD5ir3oGuiWDD:+K0Al/6Ly2VgNyoO7AJnD5tvv

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks