Overview

overview

10

Static

static

10

2482005c70...cs.exe

windows7-x64

10

2482005c70...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2482005c706bc3d362b518ce9ac3ae80_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240525-1nsxnacb69

  • MD5

    2482005c706bc3d362b518ce9ac3ae80

  • SHA1

    77e0e5a0698aa97d94a9127e57d710c5949e0ff2

  • SHA256

    5bde74c38c4f69ea901f3f30fec0bfe3659bd78fb6a64f77f4650a8626e8a9bc

  • SHA512

    ad431146d74fc5c539b293c5df023429fcb3ca27c4063699d9630f8416d22da24fdaf7e4f64119c65bd7f5c3f2c13d8a589b586eb17d700c85a4cb715d43e96c

  • SSDEEP

    24576:nrFXPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW2to:nrFnbazR0vKLXZ8to

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2482005c706bc3d362b518ce9ac3ae80_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      2482005c706bc3d362b518ce9ac3ae80

    • SHA1

      77e0e5a0698aa97d94a9127e57d710c5949e0ff2

    • SHA256

      5bde74c38c4f69ea901f3f30fec0bfe3659bd78fb6a64f77f4650a8626e8a9bc

    • SHA512

      ad431146d74fc5c539b293c5df023429fcb3ca27c4063699d9630f8416d22da24fdaf7e4f64119c65bd7f5c3f2c13d8a589b586eb17d700c85a4cb715d43e96c

    • SSDEEP

      24576:nrFXPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oW2to:nrFnbazR0vKLXZ8to

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks