Overview

overview

10

Static

static

10

56bd230d56...cs.exe

windows7-x64

10

56bd230d56...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56bd230d5641761d3fcae0d8c536a640_NeikiAnalytics.exe

  • Size

    1.9MB

  • Sample

    240526-ddt1mscd3y

  • MD5

    56bd230d5641761d3fcae0d8c536a640

  • SHA1

    f616a8760fc962fc0dfcbaa7d8bab8942aa15885

  • SHA256

    23339a49e15ba1c212b8940475c63081fea79bd405617362049bb2cd107bc44f

  • SHA512

    8d7a7e1681bf4708bdfe0061120eaf775abde587234c2841a17ca052d730482a09b1ed66599fa1074cf4af4b5007cdfbefd3b46e4c87ae5220567d171db3e553

  • SSDEEP

    49152:PiGbpfNPyupenXN5NgPyeBhbq4TTow+lsgr5e:v4XNayeBhhTW75

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      56bd230d5641761d3fcae0d8c536a640_NeikiAnalytics.exe

    • Size

      1.9MB

    • MD5

      56bd230d5641761d3fcae0d8c536a640

    • SHA1

      f616a8760fc962fc0dfcbaa7d8bab8942aa15885

    • SHA256

      23339a49e15ba1c212b8940475c63081fea79bd405617362049bb2cd107bc44f

    • SHA512

      8d7a7e1681bf4708bdfe0061120eaf775abde587234c2841a17ca052d730482a09b1ed66599fa1074cf4af4b5007cdfbefd3b46e4c87ae5220567d171db3e553

    • SSDEEP

      49152:PiGbpfNPyupenXN5NgPyeBhbq4TTow+lsgr5e:v4XNayeBhhTW75

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks