Overview

overview

10

Static

static

10

129a5c3a35...cs.exe

windows7-x64

10

129a5c3a35...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    129a5c3a35af8a88138945b19e005bc0_NeikiAnalytics.exe

  • Size

    282KB

  • Sample

    240526-tsykdadb98

  • MD5

    129a5c3a35af8a88138945b19e005bc0

  • SHA1

    3ad8d32ae0f8f12e10a425b623bdd3997b6e421b

  • SHA256

    9168ae0c6a9ae5627eefaae0716954a6e0375b6a512a19f722971f88d58ed497

  • SHA512

    e81408573c3820e77aa99bff53d94854ba87cc8595d081b3456d59c4fa4147a5d0faa9024bf62a29231144b15c0256ec3dbb73f24824fb63770c841d4feceeb8

  • SSDEEP

    6144:hLmIHtskDVmsF+ALzKvz6T/nQckEjiPISUOgW9X+hOGzC/:NLdVmcTLzKvz6jkmZzcukG2/

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      129a5c3a35af8a88138945b19e005bc0_NeikiAnalytics.exe

    • Size

      282KB

    • MD5

      129a5c3a35af8a88138945b19e005bc0

    • SHA1

      3ad8d32ae0f8f12e10a425b623bdd3997b6e421b

    • SHA256

      9168ae0c6a9ae5627eefaae0716954a6e0375b6a512a19f722971f88d58ed497

    • SHA512

      e81408573c3820e77aa99bff53d94854ba87cc8595d081b3456d59c4fa4147a5d0faa9024bf62a29231144b15c0256ec3dbb73f24824fb63770c841d4feceeb8

    • SSDEEP

      6144:hLmIHtskDVmsF+ALzKvz6T/nQckEjiPISUOgW9X+hOGzC/:NLdVmcTLzKvz6jkmZzcukG2/

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks