Overview

overview

10

Static

static

10

0b934e51cb...cs.exe

windows7-x64

10

0b934e51cb...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0b934e51cb517fa1690851e6d242f9e0_NeikiAnalytics.exe

  • Size

    161KB

  • Sample

    240526-3a9dlagf99

  • MD5

    0b934e51cb517fa1690851e6d242f9e0

  • SHA1

    6be8ab3922f4cfd29bb124e2221fd05b424a1595

  • SHA256

    51714e9bb5cf505dc9e046d8207807780c7cb5fdf6f1a6b22fe06cf16074ddaf

  • SHA512

    e22b5b18a11986a9d315d5001ec5337374d6281c3e7eb14713f183e40836e5a7d1002d68dbf52314bc55da41c9ff4daa209cdee65c160b71394b71e099841139

  • SSDEEP

    3072:atGZ7qysi9pREIGdO4WzkEVwtCJXeex7rrIRZK8K8/kvV:atUsijuNdO4ikEVwtmeetrIyRV

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      0b934e51cb517fa1690851e6d242f9e0_NeikiAnalytics.exe

    • Size

      161KB

    • MD5

      0b934e51cb517fa1690851e6d242f9e0

    • SHA1

      6be8ab3922f4cfd29bb124e2221fd05b424a1595

    • SHA256

      51714e9bb5cf505dc9e046d8207807780c7cb5fdf6f1a6b22fe06cf16074ddaf

    • SHA512

      e22b5b18a11986a9d315d5001ec5337374d6281c3e7eb14713f183e40836e5a7d1002d68dbf52314bc55da41c9ff4daa209cdee65c160b71394b71e099841139

    • SSDEEP

      3072:atGZ7qysi9pREIGdO4WzkEVwtCJXeex7rrIRZK8K8/kvV:atUsijuNdO4ikEVwtmeetrIyRV

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks