Overview

overview

10

Static

static

10

4339b46ed4...cs.exe

windows7-x64

10

4339b46ed4...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4339b46ed4482a00582c4ef68679bac0_NeikiAnalytics.exe

  • Size

    141KB

  • Sample

    240519-1pxbgabe89

  • MD5

    4339b46ed4482a00582c4ef68679bac0

  • SHA1

    47b57b8d2ea47dad8fc331e90d9a4723d71509b6

  • SHA256

    514289d397d3187b2fc6d6f9d8bc3e208f4856ce362400c765fc990eb60213e9

  • SHA512

    47adef6434fdcc080826a4c779daff15e31fa20d29c5f2a3745d3792fe793bd35353a3cb7bc9afd712a7ddec1865ed068747c15723a2bfe9ca67cf119b2509de

  • SSDEEP

    3072:lNGHLmEIBz/kBYAdbtXIqFFwQ9bGCmBJFWpoPSkGFj/p7sW0l:lIrmEULMY6bpIqFFN9bGCKJFtE/JK

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      4339b46ed4482a00582c4ef68679bac0_NeikiAnalytics.exe

    • Size

      141KB

    • MD5

      4339b46ed4482a00582c4ef68679bac0

    • SHA1

      47b57b8d2ea47dad8fc331e90d9a4723d71509b6

    • SHA256

      514289d397d3187b2fc6d6f9d8bc3e208f4856ce362400c765fc990eb60213e9

    • SHA512

      47adef6434fdcc080826a4c779daff15e31fa20d29c5f2a3745d3792fe793bd35353a3cb7bc9afd712a7ddec1865ed068747c15723a2bfe9ca67cf119b2509de

    • SSDEEP

      3072:lNGHLmEIBz/kBYAdbtXIqFFwQ9bGCmBJFWpoPSkGFj/p7sW0l:lIrmEULMY6bpIqFFN9bGCKJFtE/JK

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks