Overview

overview

10

Static

static

10

02f806c1fb...cs.exe

windows7-x64

10

02f806c1fb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02f806c1fbadb2970873e9abc725ad50_NeikiAnalytics

  • Size

    320KB

  • Sample

    240516-v887gsgb97

  • MD5

    02f806c1fbadb2970873e9abc725ad50

  • SHA1

    52a2b14de2432222bf6576169ff397fcda4a5987

  • SHA256

    52093dc654ad9ef5edf7deda55e6dbc728a186310fd63a27a3ba3e4792a8b8cc

  • SHA512

    8bf0d0bc8040bb06f40d3df8046138a9ad543fbe34c41ecbac8de0e2b6bb6065b81577b4f11d1a462a782f124f8dcf9f598a706d9ea7e95b29a010b289202fc2

  • SSDEEP

    6144:X9xWabjhJ9vKpO6c8TCndOGeKTame6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+I:NptnKOsedOGeKTaPkY660fIaDZkY66+

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      02f806c1fbadb2970873e9abc725ad50_NeikiAnalytics

    • Size

      320KB

    • MD5

      02f806c1fbadb2970873e9abc725ad50

    • SHA1

      52a2b14de2432222bf6576169ff397fcda4a5987

    • SHA256

      52093dc654ad9ef5edf7deda55e6dbc728a186310fd63a27a3ba3e4792a8b8cc

    • SHA512

      8bf0d0bc8040bb06f40d3df8046138a9ad543fbe34c41ecbac8de0e2b6bb6065b81577b4f11d1a462a782f124f8dcf9f598a706d9ea7e95b29a010b289202fc2

    • SSDEEP

      6144:X9xWabjhJ9vKpO6c8TCndOGeKTame6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+I:NptnKOsedOGeKTaPkY660fIaDZkY66+

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks