Overview

overview

10

Static

static

10

e9d4e2253b...cs.exe

windows7-x64

10

e9d4e2253b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e9d4e2253beda0b752d6bd46b51f2ae0_NeikiAnalytics.exe

  • Size

    138KB

  • Sample

    240517-m49cpafb23

  • MD5

    e9d4e2253beda0b752d6bd46b51f2ae0

  • SHA1

    3abdee2c5775b80dea544372c91b879b864c674e

  • SHA256

    48cc802a8c1c34bebe6beab2e3020273a7cf60d25856bd9df4fcab65cde04e41

  • SHA512

    478ae65b875e6049cd16a1ca43638640d713552ae29a2c60f2fa9bb87d6b4a9f7cf96ddeffc3c7365ccc18fcff4af8d11cb71d736a467f5bd93320b9b25b5cd9

  • SSDEEP

    1536:VaEr4EDnTGufT1eYB/FKUS8b0YbDBsogNPhXbSZcWiqgF72S7f/QuMXi1oHk3CYI:UV6PxewLNso4JXGmW2wS7IrHrY8pjq6

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e9d4e2253beda0b752d6bd46b51f2ae0_NeikiAnalytics.exe

    • Size

      138KB

    • MD5

      e9d4e2253beda0b752d6bd46b51f2ae0

    • SHA1

      3abdee2c5775b80dea544372c91b879b864c674e

    • SHA256

      48cc802a8c1c34bebe6beab2e3020273a7cf60d25856bd9df4fcab65cde04e41

    • SHA512

      478ae65b875e6049cd16a1ca43638640d713552ae29a2c60f2fa9bb87d6b4a9f7cf96ddeffc3c7365ccc18fcff4af8d11cb71d736a467f5bd93320b9b25b5cd9

    • SSDEEP

      1536:VaEr4EDnTGufT1eYB/FKUS8b0YbDBsogNPhXbSZcWiqgF72S7f/QuMXi1oHk3CYI:UV6PxewLNso4JXGmW2wS7IrHrY8pjq6

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks