Overview

overview

10

Static

static

10

e95634dc26...cs.exe

windows7-x64

10

e95634dc26...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e95634dc262d52374739dd7af7f1a470_NeikiAnalytics.exe

  • Size

    368KB

  • Sample

    240517-mh22gsdg4z

  • MD5

    e95634dc262d52374739dd7af7f1a470

  • SHA1

    45376c57e157d3ef78203e3ebbeb3f71d25b72ce

  • SHA256

    eee9d3e498c04591ceb7da0d826d63aa47ed35ffaea0e932d4d81822e2cc115d

  • SHA512

    a8eda7ee8d092ebadc98a460fb2fc9f95cb8c76b062672c2f2a507b4505eda740f86765305180d9d3b5eb4be36765aa0b85b73fb257fd72677fd1847597e8c61

  • SSDEEP

    6144:TSnqXKJgzGHbuMlTjZXvEQo9dfJBEdKFckUQ/4TIHD4xutM3VOEIuV5t6R+0I/V2:TudT9XvEhdfJkKSkU3kHyuaRB5t6k0IY

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e95634dc262d52374739dd7af7f1a470_NeikiAnalytics.exe

    • Size

      368KB

    • MD5

      e95634dc262d52374739dd7af7f1a470

    • SHA1

      45376c57e157d3ef78203e3ebbeb3f71d25b72ce

    • SHA256

      eee9d3e498c04591ceb7da0d826d63aa47ed35ffaea0e932d4d81822e2cc115d

    • SHA512

      a8eda7ee8d092ebadc98a460fb2fc9f95cb8c76b062672c2f2a507b4505eda740f86765305180d9d3b5eb4be36765aa0b85b73fb257fd72677fd1847597e8c61

    • SSDEEP

      6144:TSnqXKJgzGHbuMlTjZXvEQo9dfJBEdKFckUQ/4TIHD4xutM3VOEIuV5t6R+0I/V2:TudT9XvEhdfJkKSkU3kHyuaRB5t6k0IY

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks