Overview

overview

10

Static

static

10

fa0e451a17...cs.exe

windows7-x64

10

fa0e451a17...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fa0e451a170ce924a361604e4e9842b0_NeikiAnalytics.exe

  • Size

    229KB

  • Sample

    240525-efn3vadg64

  • MD5

    fa0e451a170ce924a361604e4e9842b0

  • SHA1

    bd61d5f9e34f08f835f1fa5f8add734f9d71cfa3

  • SHA256

    397eeb0f78f181e01c10c3121fdf63d5c9a27431b8b7d5977bba57e96a4211db

  • SHA512

    07f8fb1af1f90ee24f8a89ebb40db7e14d4e0c987b52e1a92e7645d0a5b2df3aa83d61e8dfc61471fefad25008a9cf97e8ff8901197ecd744b5f14e1aa974d5c

  • SSDEEP

    6144:HF0AEusBI7271+HZ/pvkym/89bYEwPhCKvav:H6AEusBt7AIfFfvav

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      fa0e451a170ce924a361604e4e9842b0_NeikiAnalytics.exe

    • Size

      229KB

    • MD5

      fa0e451a170ce924a361604e4e9842b0

    • SHA1

      bd61d5f9e34f08f835f1fa5f8add734f9d71cfa3

    • SHA256

      397eeb0f78f181e01c10c3121fdf63d5c9a27431b8b7d5977bba57e96a4211db

    • SHA512

      07f8fb1af1f90ee24f8a89ebb40db7e14d4e0c987b52e1a92e7645d0a5b2df3aa83d61e8dfc61471fefad25008a9cf97e8ff8901197ecd744b5f14e1aa974d5c

    • SSDEEP

      6144:HF0AEusBI7271+HZ/pvkym/89bYEwPhCKvav:H6AEusBt7AIfFfvav

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks