Overview

overview

10

Static

static

10

4500620185...cs.exe

windows7-x64

10

4500620185...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4500620185a63abf72c1fe6824474640_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240526-bfktmshg55

  • MD5

    4500620185a63abf72c1fe6824474640

  • SHA1

    c8b94f3daaa04dddfc178b94a99df8b981fe86e8

  • SHA256

    1b81ed27e3733746d638dc507e95688de87c58ee7d516dffc262e1cd3f5626ce

  • SHA512

    25b9d8211342a30c11fa27b80a30dc4a6432352435e47747b81babd9a647dcb748aa1c648a69a1915e51799b937addd1914c05cb74b37a0b004ffd6237441960

  • SSDEEP

    3072:zZDcIVi5cSrRJwn/ACdASApGU2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/r:zZDVVWcSron/ACdASApX4BhHmNEcYj98

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      4500620185a63abf72c1fe6824474640_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      4500620185a63abf72c1fe6824474640

    • SHA1

      c8b94f3daaa04dddfc178b94a99df8b981fe86e8

    • SHA256

      1b81ed27e3733746d638dc507e95688de87c58ee7d516dffc262e1cd3f5626ce

    • SHA512

      25b9d8211342a30c11fa27b80a30dc4a6432352435e47747b81babd9a647dcb748aa1c648a69a1915e51799b937addd1914c05cb74b37a0b004ffd6237441960

    • SSDEEP

      3072:zZDcIVi5cSrRJwn/ACdASApGU2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/r:zZDVVWcSron/ACdASApX4BhHmNEcYj98

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks