Overview

overview

10

Static

static

10

11d9d49d5a...cs.exe

windows7-x64

10

11d9d49d5a...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    11d9d49d5a09f8584901a3027b3379d0_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240527-a6dycaac2x

  • MD5

    11d9d49d5a09f8584901a3027b3379d0

  • SHA1

    8e2332b03f47c7de9e4d816e25f646576921f632

  • SHA256

    4a87e78f4edaccfc8aab00a555d4e86f23be3ff07d8449c27caace289532ff45

  • SHA512

    4efb5a04cd2dcae9f5f23d0a50efa3d0a650fd79e4fccf2e27fb96acf8e4db8e9020ba21e2f56ed01f6750d8e303a1104b2cf4ef3aa5a36c73f9fb9112858c92

  • SSDEEP

    24576:9b58L4uvxxCNZauljb+wga/ZSE0E77sFZTDleyVVv:918LpqN5l/+wggl0EghcyVVv

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      11d9d49d5a09f8584901a3027b3379d0_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      11d9d49d5a09f8584901a3027b3379d0

    • SHA1

      8e2332b03f47c7de9e4d816e25f646576921f632

    • SHA256

      4a87e78f4edaccfc8aab00a555d4e86f23be3ff07d8449c27caace289532ff45

    • SHA512

      4efb5a04cd2dcae9f5f23d0a50efa3d0a650fd79e4fccf2e27fb96acf8e4db8e9020ba21e2f56ed01f6750d8e303a1104b2cf4ef3aa5a36c73f9fb9112858c92

    • SSDEEP

      24576:9b58L4uvxxCNZauljb+wga/ZSE0E77sFZTDleyVVv:918LpqN5l/+wggl0EghcyVVv

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks