Overview

overview

10

Static

static

10

5c3ac56a7c...cs.exe

windows7-x64

10

5c3ac56a7c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5c3ac56a7cfda5b9dc43391597ef7510_NeikiAnalytics.exe

  • Size

    1.4MB

  • Sample

    240526-d4fkyadd2v

  • MD5

    5c3ac56a7cfda5b9dc43391597ef7510

  • SHA1

    90da05b2561d52edde23200715c8808940fe798a

  • SHA256

    fd1aad8e52a29996e0d88a6df04875fdcb62483519803f12fb9baf65bb0d98cb

  • SHA512

    3edd06b109e850d3f4999ccf17f3652ad456cd5e692cc7281421551ca3457d8c455aa96b5896377070ff33d7208b329f418b8a03d64a0f60b6ac76f14dfe8b8d

  • SSDEEP

    12288:qGTCzXjOYpV6yYPI3cpV6yYPeHCXwpnsKvNA+XTvZHWuEo3oWL5g:ZCzXjOYWHWIpsKv2EvZHp3oWNg

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      5c3ac56a7cfda5b9dc43391597ef7510_NeikiAnalytics.exe

    • Size

      1.4MB

    • MD5

      5c3ac56a7cfda5b9dc43391597ef7510

    • SHA1

      90da05b2561d52edde23200715c8808940fe798a

    • SHA256

      fd1aad8e52a29996e0d88a6df04875fdcb62483519803f12fb9baf65bb0d98cb

    • SHA512

      3edd06b109e850d3f4999ccf17f3652ad456cd5e692cc7281421551ca3457d8c455aa96b5896377070ff33d7208b329f418b8a03d64a0f60b6ac76f14dfe8b8d

    • SSDEEP

      12288:qGTCzXjOYpV6yYPI3cpV6yYPeHCXwpnsKvNA+XTvZHWuEo3oWL5g:ZCzXjOYWHWIpsKv2EvZHp3oWNg

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks