Overview

overview

10

Static

static

10

3ba994cbe3...cs.exe

windows7-x64

10

3ba994cbe3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3ba994cbe324230875ed4b42f464bc40_NeikiAnalytics.exe

  • Size

    194KB

  • Sample

    240525-tqbylaaf63

  • MD5

    3ba994cbe324230875ed4b42f464bc40

  • SHA1

    e1718efe5db4ffb8f04153abe1332969d0cac89b

  • SHA256

    12c4294f0a040262cee9bb1349f6fb61e91ded112fd142853377084a93caa8a1

  • SHA512

    fe9fd1b1a70424791f56e8b5f798e251e657a7b97b2958aeee0bf081659e9de0e6792bf463738c7863f6ceb58634e4730cdcb625f241d9fb861e94edbf9ad9e4

  • SSDEEP

    3072:GdEUfKj8BYbDiC1ZTK7sxtLUIGV2LKfjNFEH3GQlLnp:GUSiZTK40h2oNqHrH

Score
10/10
berbewbackdoordroppertrojanupx

Malware Config

Targets

    • Target

      3ba994cbe324230875ed4b42f464bc40_NeikiAnalytics.exe

    • Size

      194KB

    • MD5

      3ba994cbe324230875ed4b42f464bc40

    • SHA1

      e1718efe5db4ffb8f04153abe1332969d0cac89b

    • SHA256

      12c4294f0a040262cee9bb1349f6fb61e91ded112fd142853377084a93caa8a1

    • SHA512

      fe9fd1b1a70424791f56e8b5f798e251e657a7b97b2958aeee0bf081659e9de0e6792bf463738c7863f6ceb58634e4730cdcb625f241d9fb861e94edbf9ad9e4

    • SSDEEP

      3072:GdEUfKj8BYbDiC1ZTK7sxtLUIGV2LKfjNFEH3GQlLnp:GUSiZTK40h2oNqHrH

    Score
    10/10
    backdoordroppertrojanupx

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks