Overview

overview

10

Static

static

10

d4f6ff4305...cs.exe

windows7-x64

10

d4f6ff4305...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d4f6ff430554f03ff243cb3411ada820_NeikiAnalytics.exe

  • Size

    664KB

  • Sample

    240520-jjclfaab83

  • MD5

    d4f6ff430554f03ff243cb3411ada820

  • SHA1

    78032bece3b62baf8650b9068649cb721f503437

  • SHA256

    09e532a9ff0607aa914a56627993d9c6a3cfbe63b0dd89d59c0a1666e825e5e8

  • SHA512

    9d8bdd5a57ec06a338de1f67793aafbe4c7896102e5d7e651577e54c6288cb404f990762e1c976f17dbe7c91806472fc6aa68913e8ba0517c832a38052c5ef37

  • SSDEEP

    12288:pYIW0p98Oh8P7h8K/+HH99mZp2As80fnb2ZrRsq2dVNLlgjOETn4/5BWpUohOqH:dW298E8ucwHqr2t21RsqONLlgjOETn4a

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      d4f6ff430554f03ff243cb3411ada820_NeikiAnalytics.exe

    • Size

      664KB

    • MD5

      d4f6ff430554f03ff243cb3411ada820

    • SHA1

      78032bece3b62baf8650b9068649cb721f503437

    • SHA256

      09e532a9ff0607aa914a56627993d9c6a3cfbe63b0dd89d59c0a1666e825e5e8

    • SHA512

      9d8bdd5a57ec06a338de1f67793aafbe4c7896102e5d7e651577e54c6288cb404f990762e1c976f17dbe7c91806472fc6aa68913e8ba0517c832a38052c5ef37

    • SSDEEP

      12288:pYIW0p98Oh8P7h8K/+HH99mZp2As80fnb2ZrRsq2dVNLlgjOETn4/5BWpUohOqH:dW298E8ucwHqr2t21RsqONLlgjOETn4a

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks