Overview

overview

10

Static

static

10

406434dc85...cs.exe

windows7-x64

10

406434dc85...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    406434dc8589a615d696ccdee4d5b100_NeikiAnalytics.exe

  • Size

    1004KB

  • Sample

    240526-ax1qragc4x

  • MD5

    406434dc8589a615d696ccdee4d5b100

  • SHA1

    8f5e4057925a8004538c49f7c334f4b3612938c5

  • SHA256

    ef1c08dd62bdd1d1a32723c7bd7f248ff1fb241a6750f6e35c33fae389eb6730

  • SHA512

    e71bd02da5bf2b40cc44f59316eb1d55982f5183b4ce863f653646688cc8075d8eaf97deea16c7ffd613618c0be409f1dcc5e451e78d5f18a17eb8e791c26777

  • SSDEEP

    24576:YLV4+bV+zthrwXYC4jLj+GHhn8F0fe5+9FWa/ZSCBHn677:YZYZwXJQLrHBp9FWgVBHn6

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      406434dc8589a615d696ccdee4d5b100_NeikiAnalytics.exe

    • Size

      1004KB

    • MD5

      406434dc8589a615d696ccdee4d5b100

    • SHA1

      8f5e4057925a8004538c49f7c334f4b3612938c5

    • SHA256

      ef1c08dd62bdd1d1a32723c7bd7f248ff1fb241a6750f6e35c33fae389eb6730

    • SHA512

      e71bd02da5bf2b40cc44f59316eb1d55982f5183b4ce863f653646688cc8075d8eaf97deea16c7ffd613618c0be409f1dcc5e451e78d5f18a17eb8e791c26777

    • SSDEEP

      24576:YLV4+bV+zthrwXYC4jLj+GHhn8F0fe5+9FWa/ZSCBHn677:YZYZwXJQLrHBp9FWgVBHn6

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks