Overview

overview

10

Static

static

10

110b501841...cs.exe

windows7-x64

10

110b501841...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    110b501841413e0a5357ace72f8cfbe0_NeikiAnalytics.exe

  • Size

    199KB

  • Sample

    240516-xayn7sad9s

  • MD5

    110b501841413e0a5357ace72f8cfbe0

  • SHA1

    121d19e48439219e2ba12dfa49df3903c1dceeb2

  • SHA256

    621b34bac9ad6ce5a04fe3082d2c04773eef0a2d905e44408d6ea2eaef8cb1e6

  • SHA512

    816cc880ca6f995c063932f8fe4cdf46084e615ab1c99f7cdd825f9960fa312cb5b6428e1e78c72bd66a2ce54c7f160abbacece9b6e20a93cb6666049b2285ca

  • SSDEEP

    6144:Lmgf0nJl0S0SZSCZj81+jq4peBK034YOmFz1h:ywUZSCG1+jheBbOmFxh

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      110b501841413e0a5357ace72f8cfbe0_NeikiAnalytics.exe

    • Size

      199KB

    • MD5

      110b501841413e0a5357ace72f8cfbe0

    • SHA1

      121d19e48439219e2ba12dfa49df3903c1dceeb2

    • SHA256

      621b34bac9ad6ce5a04fe3082d2c04773eef0a2d905e44408d6ea2eaef8cb1e6

    • SHA512

      816cc880ca6f995c063932f8fe4cdf46084e615ab1c99f7cdd825f9960fa312cb5b6428e1e78c72bd66a2ce54c7f160abbacece9b6e20a93cb6666049b2285ca

    • SSDEEP

      6144:Lmgf0nJl0S0SZSCZj81+jq4peBK034YOmFz1h:ywUZSCG1+jheBbOmFxh

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks