Overview

overview

10

Static

static

10

14707a54de...cs.exe

windows7-x64

10

14707a54de...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    14707a54de2c18143da7818c9b8112f0_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240526-t7d5aach8v

  • MD5

    14707a54de2c18143da7818c9b8112f0

  • SHA1

    84dff94462dd61a1d63f62cc2edec0083bc9db28

  • SHA256

    3fc55237befb182e4235e4562e258fcde913ae0f9b5f1c2c7d49da2637d5e457

  • SHA512

    e3e15824958b4b6791767a7128bfa4a629a231136f2dcc43bf27e4f57d08061f6311540f5e1e0a7a8252d3d3da136d4a842ca2694a768e217c199f440f8ff4f4

  • SSDEEP

    6144:7XidRnMpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAP8:7XNpV6yYPI3cpV6yYPZ0PVdvcY9+8hka

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      14707a54de2c18143da7818c9b8112f0_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      14707a54de2c18143da7818c9b8112f0

    • SHA1

      84dff94462dd61a1d63f62cc2edec0083bc9db28

    • SHA256

      3fc55237befb182e4235e4562e258fcde913ae0f9b5f1c2c7d49da2637d5e457

    • SHA512

      e3e15824958b4b6791767a7128bfa4a629a231136f2dcc43bf27e4f57d08061f6311540f5e1e0a7a8252d3d3da136d4a842ca2694a768e217c199f440f8ff4f4

    • SSDEEP

      6144:7XidRnMpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1GAP8:7XNpV6yYPI3cpV6yYPZ0PVdvcY9+8hka

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks