Overview

overview

10

Static

static

10

ea38a55e74...cs.exe

windows7-x64

10

ea38a55e74...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ea38a55e744dc990e2c30ae0a0d73320_NeikiAnalytics.exe

  • Size

    378KB

  • Sample

    240517-ncm6tafd76

  • MD5

    ea38a55e744dc990e2c30ae0a0d73320

  • SHA1

    0436c166d9bdf59334b0d04638e6803a49806c7f

  • SHA256

    698e0a981c6871a761f2df53ca074261af6b4249b5779a30dc02324baee91b9f

  • SHA512

    b856ce87450ad6898933be9c77045fd15e6d7fe0b150582e98d47dedd6d47ccd54b38960026206d16a0b993269730812ef2a013aec2474a9303e9e1cbf3f1171

  • SSDEEP

    6144:STO4RHHWA5E+eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:SRtK+eYr75lTefkY660fIaDZkY660f28

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ea38a55e744dc990e2c30ae0a0d73320_NeikiAnalytics.exe

    • Size

      378KB

    • MD5

      ea38a55e744dc990e2c30ae0a0d73320

    • SHA1

      0436c166d9bdf59334b0d04638e6803a49806c7f

    • SHA256

      698e0a981c6871a761f2df53ca074261af6b4249b5779a30dc02324baee91b9f

    • SHA512

      b856ce87450ad6898933be9c77045fd15e6d7fe0b150582e98d47dedd6d47ccd54b38960026206d16a0b993269730812ef2a013aec2474a9303e9e1cbf3f1171

    • SSDEEP

      6144:STO4RHHWA5E+eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:SRtK+eYr75lTefkY660fIaDZkY660f28

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks