Overview

overview

10

Static

static

10

2df91b68b8...cs.exe

windows7-x64

10

2df91b68b8...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2df91b68b8be2e943435a736588fa130_NeikiAnalytics.exe

  • Size

    115KB

  • Sample

    240525-2p23dsdh86

  • MD5

    2df91b68b8be2e943435a736588fa130

  • SHA1

    e053471f62251f144a1cff93424b70c870f85930

  • SHA256

    8a230ce2f7eacca22c49e24afbd5863c2a148dfa9babbded7967cd11153f7a7b

  • SHA512

    849128dc62450d9f8449253e49a16aad91324965306f8459f027a697db2f323d982f80bdfc2eaef0e67f689a25be3d718b44e287dcfbc10e3373a4673250c518

  • SSDEEP

    3072:6335xpv7W6jFv0RGXnFW2VTbWymWU6SMQehalNgFuk0:q5HRFNXnf6ymWU5MClN5

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2df91b68b8be2e943435a736588fa130_NeikiAnalytics.exe

    • Size

      115KB

    • MD5

      2df91b68b8be2e943435a736588fa130

    • SHA1

      e053471f62251f144a1cff93424b70c870f85930

    • SHA256

      8a230ce2f7eacca22c49e24afbd5863c2a148dfa9babbded7967cd11153f7a7b

    • SHA512

      849128dc62450d9f8449253e49a16aad91324965306f8459f027a697db2f323d982f80bdfc2eaef0e67f689a25be3d718b44e287dcfbc10e3373a4673250c518

    • SSDEEP

      3072:6335xpv7W6jFv0RGXnFW2VTbWymWU6SMQehalNgFuk0:q5HRFNXnf6ymWU5MClN5

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks