Overview

overview

10

Static

static

10

26e1b685bf...cs.exe

windows7-x64

10

26e1b685bf...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    26e1b685bfd6855e7614caada847ad50_NeikiAnalytics.exe

  • Size

    366KB

  • Sample

    240522-mx7khscc59

  • MD5

    26e1b685bfd6855e7614caada847ad50

  • SHA1

    5710de802c86dc49472a766e0c29f1ba9133a5dc

  • SHA256

    bfd5fdb19ef2552f728956dfe9aecdd60c3a40f120e53a0d91639bbc0ee05a0b

  • SHA512

    e0fa696bdd78db04fd3c9c858ad335db122f318e5086216c6450f559b3d4cc7c23dc498d46e4ef34cf9db0111380ee4bf02c65a5251ae829b8fd78fe68cee14a

  • SSDEEP

    6144:48dRBQQ5LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:bRbZoivKv32XXf9Do3+IviD

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      26e1b685bfd6855e7614caada847ad50_NeikiAnalytics.exe

    • Size

      366KB

    • MD5

      26e1b685bfd6855e7614caada847ad50

    • SHA1

      5710de802c86dc49472a766e0c29f1ba9133a5dc

    • SHA256

      bfd5fdb19ef2552f728956dfe9aecdd60c3a40f120e53a0d91639bbc0ee05a0b

    • SHA512

      e0fa696bdd78db04fd3c9c858ad335db122f318e5086216c6450f559b3d4cc7c23dc498d46e4ef34cf9db0111380ee4bf02c65a5251ae829b8fd78fe68cee14a

    • SSDEEP

      6144:48dRBQQ5LRlUivKvUmKyIxLDXXoq9FJZCUmKyIxLpmAqkCcoMOk:bRbZoivKv32XXf9Do3+IviD

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks