Overview

overview

10

Static

static

10

e369abd878...cs.exe

windows7-x64

10

e369abd878...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    e369abd8783bcaa9461b771be4f32510_NeikiAnalytics.exe

  • Size

    227KB

  • Sample

    240520-l252tafb8x

  • MD5

    e369abd8783bcaa9461b771be4f32510

  • SHA1

    d65a86326c28fce430e7fa2c9019918b4b957933

  • SHA256

    ec991adaae3493953969e23dee01a5e055c3d89b41a853650f395209f45c4767

  • SHA512

    087c497e79e6b40e69cb2551f5e2081757aadf0a1fd374d95fa6dfc3c99a8166668c40c384b40d39c6760b67ba5331f1d1ee75ed2a147fda43f0033c32cd01e9

  • SSDEEP

    3072:t+Ds0MuIqcXlnE3YA7reyjpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:EDJrcV+7y9m7U5j2QE2+g24Id2jFHu

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e369abd8783bcaa9461b771be4f32510_NeikiAnalytics.exe

    • Size

      227KB

    • MD5

      e369abd8783bcaa9461b771be4f32510

    • SHA1

      d65a86326c28fce430e7fa2c9019918b4b957933

    • SHA256

      ec991adaae3493953969e23dee01a5e055c3d89b41a853650f395209f45c4767

    • SHA512

      087c497e79e6b40e69cb2551f5e2081757aadf0a1fd374d95fa6dfc3c99a8166668c40c384b40d39c6760b67ba5331f1d1ee75ed2a147fda43f0033c32cd01e9

    • SSDEEP

      3072:t+Ds0MuIqcXlnE3YA7reyjpwoTRBmDRGGurhUXvBj2QE2HegPelTeIdI7jFHu:EDJrcV+7y9m7U5j2QE2+g24Id2jFHu

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks