Overview

overview

10

Static

static

10

e370fb2b84...cs.exe

windows7-x64

10

e370fb2b84...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e370fb2b849ea39fda57ee8e1f10c4b0_NeikiAnalytics

  • Size

    556KB

  • Sample

    240516-sy3wlsbc2s

  • MD5

    e370fb2b849ea39fda57ee8e1f10c4b0

  • SHA1

    3dd30c8b6b921ec6b09ae840bb2e7a2b9c1e4ce7

  • SHA256

    8de00bafdd4c24d1c52d130b2d119d125e4f7e10214b2fb190cbb6e9c7f41738

  • SHA512

    c50831f61de8666c8183edd612c76ff6438a56213aead48a16062cb860a71f3e3ab35c0cccf4529191bdd70b5c9af7cdbefb228f3ce7bf8b377d474e0d0d038f

  • SSDEEP

    12288:SaRU0dPU1f7aOlxzr3cOK3TajRfXFMKNxr9Z7tEGVqT4Df:SaRUrf7aOlxzLyTajRfXFMKNxr9Z7tES

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e370fb2b849ea39fda57ee8e1f10c4b0_NeikiAnalytics

    • Size

      556KB

    • MD5

      e370fb2b849ea39fda57ee8e1f10c4b0

    • SHA1

      3dd30c8b6b921ec6b09ae840bb2e7a2b9c1e4ce7

    • SHA256

      8de00bafdd4c24d1c52d130b2d119d125e4f7e10214b2fb190cbb6e9c7f41738

    • SHA512

      c50831f61de8666c8183edd612c76ff6438a56213aead48a16062cb860a71f3e3ab35c0cccf4529191bdd70b5c9af7cdbefb228f3ce7bf8b377d474e0d0d038f

    • SSDEEP

      12288:SaRU0dPU1f7aOlxzr3cOK3TajRfXFMKNxr9Z7tEGVqT4Df:SaRUrf7aOlxzLyTajRfXFMKNxr9Z7tES

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks