Overview

overview

10

Static

static

10

e38f0fd907...cs.exe

windows7-x64

10

e38f0fd907...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e38f0fd9070cbc777f29432849a0a130_NeikiAnalytics

  • Size

    565KB

  • Sample

    240516-s1wkbabf66

  • MD5

    e38f0fd9070cbc777f29432849a0a130

  • SHA1

    699c295d9a222de3fa20e4f64a384e4c87de14ff

  • SHA256

    c1b6714268946e8af5227a5b3a769c103531160b9b39829a8ef1a64ee38d928d

  • SHA512

    a5b28ec8990d6a9e89fdd60c2a7b991ded434aeea9d91c64594e3723aa54066e67e4e0f5e13bba630ae54fb3663a5aaf5cdce83abfba0d0feb351e3f454232ff

  • SSDEEP

    12288:8j/wGutuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:+/0tuFjAh/mvFimm09OX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e38f0fd9070cbc777f29432849a0a130_NeikiAnalytics

    • Size

      565KB

    • MD5

      e38f0fd9070cbc777f29432849a0a130

    • SHA1

      699c295d9a222de3fa20e4f64a384e4c87de14ff

    • SHA256

      c1b6714268946e8af5227a5b3a769c103531160b9b39829a8ef1a64ee38d928d

    • SHA512

      a5b28ec8990d6a9e89fdd60c2a7b991ded434aeea9d91c64594e3723aa54066e67e4e0f5e13bba630ae54fb3663a5aaf5cdce83abfba0d0feb351e3f454232ff

    • SSDEEP

      12288:8j/wGutuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:+/0tuFjAh/mvFimm09OX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks