Overview

overview

10

Static

static

10

d458b7cc0f...cs.exe

windows7-x64

10

d458b7cc0f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d458b7cc0fded94783632a431127dbf0_NeikiAnalytics.exe

  • Size

    235KB

  • Sample

    240520-jg4l5sab37

  • MD5

    d458b7cc0fded94783632a431127dbf0

  • SHA1

    338105fddb47168d21b6adf3bb11a1c52e03d2c5

  • SHA256

    f873cc552d59307ff67651de7593bb0334ecd00c9df0bcde2a28460a75cdcaef

  • SHA512

    a520697ccb275ff58d8f8e462d2cadcccb2f6c7502d793d80376dc99529bfce861fdbab1d58f4ac07e43601a4f3933490e37d5b78ce2da619350022162636d3f

  • SSDEEP

    3072:0B8JFsoBzfyzm2FGTelPHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5Auv:0GJmodfxkYQPulrtMsQB+vn87L5A5

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d458b7cc0fded94783632a431127dbf0_NeikiAnalytics.exe

    • Size

      235KB

    • MD5

      d458b7cc0fded94783632a431127dbf0

    • SHA1

      338105fddb47168d21b6adf3bb11a1c52e03d2c5

    • SHA256

      f873cc552d59307ff67651de7593bb0334ecd00c9df0bcde2a28460a75cdcaef

    • SHA512

      a520697ccb275ff58d8f8e462d2cadcccb2f6c7502d793d80376dc99529bfce861fdbab1d58f4ac07e43601a4f3933490e37d5b78ce2da619350022162636d3f

    • SSDEEP

      3072:0B8JFsoBzfyzm2FGTelPHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5Auv:0GJmodfxkYQPulrtMsQB+vn87L5A5

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks