Overview

overview

10

Static

static

10

1b8ac9bc6b...cs.exe

windows7-x64

10

1b8ac9bc6b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    1b8ac9bc6bcefd4a484e7aac0eecf8401f9f5e3efdf90a343ff848835a308cad_NeikiAnalytics

  • Size

    768KB

  • Sample

    240521-jfftpadb22

  • MD5

    d87c1a0a113c3971438a7c7db2ddb1d0

  • SHA1

    a044a1c2299c7bfbc6a6f04e8a52d95a3f61cbf3

  • SHA256

    1b8ac9bc6bcefd4a484e7aac0eecf8401f9f5e3efdf90a343ff848835a308cad

  • SHA512

    0057e40c71241da201d3f66470e70a61e4f74fb55e4fa1aa765fd37d28f2ede660ddba13a1dea02186edbaa345cbab7175c9c717f7d384063cc626c87c3024ca

  • SSDEEP

    12288:jv+6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+A:Kq5h3q5htaSHFaZRBEYyqmaf2qwiHPKu

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1b8ac9bc6bcefd4a484e7aac0eecf8401f9f5e3efdf90a343ff848835a308cad_NeikiAnalytics

    • Size

      768KB

    • MD5

      d87c1a0a113c3971438a7c7db2ddb1d0

    • SHA1

      a044a1c2299c7bfbc6a6f04e8a52d95a3f61cbf3

    • SHA256

      1b8ac9bc6bcefd4a484e7aac0eecf8401f9f5e3efdf90a343ff848835a308cad

    • SHA512

      0057e40c71241da201d3f66470e70a61e4f74fb55e4fa1aa765fd37d28f2ede660ddba13a1dea02186edbaa345cbab7175c9c717f7d384063cc626c87c3024ca

    • SSDEEP

      12288:jv+6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGZ+A:Kq5h3q5htaSHFaZRBEYyqmaf2qwiHPKu

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks