Overview

overview

10

Static

static

10

2f649dcfaa...cs.exe

windows7-x64

10

2f649dcfaa...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2f649dcfaab1658ec67043bb66f55340_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240525-2wf4haec22

  • MD5

    2f649dcfaab1658ec67043bb66f55340

  • SHA1

    e19908270095185cf4614ed04b90243c12d5b296

  • SHA256

    0c57bf64360579c621a2a47c0caf449f829cad8f6c097ec02ef661d47605fcab

  • SHA512

    c3e414062f1f46ab6777d4454bc881d64e1e107a3b4897c0234ab1c85bfd2f844da18bb01a0041afc2f14c3c3561ec1dac67e61e00ffb9f1d1030cf3ac449e4a

  • SSDEEP

    3072:lToddQCCGRPwiqInG82/BhHmiImXJ2fYdV46nfPyxWhj8NCM/r:5oddQCCGRoiq474BhHmNEcYj9nhV8NCU

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2f649dcfaab1658ec67043bb66f55340_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      2f649dcfaab1658ec67043bb66f55340

    • SHA1

      e19908270095185cf4614ed04b90243c12d5b296

    • SHA256

      0c57bf64360579c621a2a47c0caf449f829cad8f6c097ec02ef661d47605fcab

    • SHA512

      c3e414062f1f46ab6777d4454bc881d64e1e107a3b4897c0234ab1c85bfd2f844da18bb01a0041afc2f14c3c3561ec1dac67e61e00ffb9f1d1030cf3ac449e4a

    • SSDEEP

      3072:lToddQCCGRPwiqInG82/BhHmiImXJ2fYdV46nfPyxWhj8NCM/r:5oddQCCGRoiq474BhHmNEcYj9nhV8NCU

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks