Overview

overview

10

Static

static

10

c5ef4155d3...cs.exe

windows7-x64

10

c5ef4155d3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c5ef4155d3c03f99d960bbe76fa5d020_NeikiAnalytics

  • Size

    768KB

  • Sample

    240516-tcwqvacd52

  • MD5

    c5ef4155d3c03f99d960bbe76fa5d020

  • SHA1

    145b10cd4b489516b28eb0510f3f155cae25a913

  • SHA256

    86ef661c41d11c82324237de355e15bb555a76170b24273736d7c6c96ad2b116

  • SHA512

    68f1eefc88f2fa8eee99879f22a5b91715e34aca679b4c0a35817c4de8f5ce66e93214cb20d20ba576aa0a0b7d81dffa29b136b89d61175084bfcb0d29842e32

  • SSDEEP

    12288:Bv06IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+A:iq5h3q5htaSHFaZRBEYyqmaf2qwiHPKu

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c5ef4155d3c03f99d960bbe76fa5d020_NeikiAnalytics

    • Size

      768KB

    • MD5

      c5ef4155d3c03f99d960bbe76fa5d020

    • SHA1

      145b10cd4b489516b28eb0510f3f155cae25a913

    • SHA256

      86ef661c41d11c82324237de355e15bb555a76170b24273736d7c6c96ad2b116

    • SHA512

      68f1eefc88f2fa8eee99879f22a5b91715e34aca679b4c0a35817c4de8f5ce66e93214cb20d20ba576aa0a0b7d81dffa29b136b89d61175084bfcb0d29842e32

    • SSDEEP

      12288:Bv06IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+A:iq5h3q5htaSHFaZRBEYyqmaf2qwiHPKu

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks