Overview

overview

10

Static

static

10

514164a785...cs.exe

windows7-x64

10

514164a785...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    514164a78503ab85875d44dace4123525bb21c43c18b07575a68b32a023cd43f_NeikiAnalytics

  • Size

    176KB

  • Sample

    240521-qa9yxaeh81

  • MD5

    dfaae094ed57143d2b162159aa4b0ec0

  • SHA1

    4222f2d7525cdb207bdb3ac82b8d07c2c22f7c79

  • SHA256

    514164a78503ab85875d44dace4123525bb21c43c18b07575a68b32a023cd43f

  • SHA512

    d8a0795b5f9be0b73ffcd23f52c14cb5733dc20ba59cb985958e9ba53b26ea9f31dc25fe6946803eb1e065374214f10e9bbd3d936bedc200b68082cd7079e2ed

  • SSDEEP

    3072:Ext6NTDu4J4UjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:OGTB1jVu3w8BdTj2V3ppQ60MMCf0RnQ4

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      514164a78503ab85875d44dace4123525bb21c43c18b07575a68b32a023cd43f_NeikiAnalytics

    • Size

      176KB

    • MD5

      dfaae094ed57143d2b162159aa4b0ec0

    • SHA1

      4222f2d7525cdb207bdb3ac82b8d07c2c22f7c79

    • SHA256

      514164a78503ab85875d44dace4123525bb21c43c18b07575a68b32a023cd43f

    • SHA512

      d8a0795b5f9be0b73ffcd23f52c14cb5733dc20ba59cb985958e9ba53b26ea9f31dc25fe6946803eb1e065374214f10e9bbd3d936bedc200b68082cd7079e2ed

    • SSDEEP

      3072:Ext6NTDu4J4UjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:OGTB1jVu3w8BdTj2V3ppQ60MMCf0RnQ4

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks