Overview

overview

10

Static

static

10

2d3fa0e207...cs.exe

windows7-x64

10

2d3fa0e207...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2d3fa0e2076e61b90e400a5c8099cef0_NeikiAnalytics.exe

  • Size

    113KB

  • Sample

    240516-zdkb4afd2z

  • MD5

    2d3fa0e2076e61b90e400a5c8099cef0

  • SHA1

    5614b90e180934115eeac9d379d2e77af5a4d162

  • SHA256

    af6a6096c0ab02e82bc6acaf610d73ab985ce093adfe4219595d484eda8bc336

  • SHA512

    07e84769f9bf3879035c51531464e065e8dcaee9620e767c374df62ae67ab05ee523a1c0fe0d64cb1415f30cee984e0f12a1e17a2a4f4aa56e4f1870475bc0fe

  • SSDEEP

    3072:RVM0mF01gDQPCAzMfLNOuGkZFfFSebHWrH8wTW0:g0wYCCMfL87otSeWrP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2d3fa0e2076e61b90e400a5c8099cef0_NeikiAnalytics.exe

    • Size

      113KB

    • MD5

      2d3fa0e2076e61b90e400a5c8099cef0

    • SHA1

      5614b90e180934115eeac9d379d2e77af5a4d162

    • SHA256

      af6a6096c0ab02e82bc6acaf610d73ab985ce093adfe4219595d484eda8bc336

    • SHA512

      07e84769f9bf3879035c51531464e065e8dcaee9620e767c374df62ae67ab05ee523a1c0fe0d64cb1415f30cee984e0f12a1e17a2a4f4aa56e4f1870475bc0fe

    • SSDEEP

      3072:RVM0mF01gDQPCAzMfLNOuGkZFfFSebHWrH8wTW0:g0wYCCMfL87otSeWrP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks