Overview

overview

10

Static

static

10

1fab2c6e63...cs.exe

windows7-x64

10

1fab2c6e63...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1fab2c6e63761fb11bfc67073c1a7450_NeikiAnalytics.exe

  • Size

    1.3MB

  • Sample

    240527-fe3ehsgf6y

  • MD5

    1fab2c6e63761fb11bfc67073c1a7450

  • SHA1

    2a1700745e6b7bb49cbf63476c6afe2dc9fd2b15

  • SHA256

    5a263e1964484df64bd2f665f55223967f0e35dd56d90aa944bc31dec84fd4e2

  • SHA512

    2dd034d957e2118d89e9a91a22fa6cee03cd1587d2d32be6c2a9af45c70be7aa5234503aba63146fc09b214b6e1459a2e918366363776320ced00d93349db7b4

  • SSDEEP

    24576:qVZj6AR51wrjsOBvpCphWYt/TBb4eBTWa/ZSjXuF77Lv+f6T8Qnskb2i6OBKaBWE:qV8RrJuphWYN9bjQgGXuFbq4TT+E

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      1fab2c6e63761fb11bfc67073c1a7450_NeikiAnalytics.exe

    • Size

      1.3MB

    • MD5

      1fab2c6e63761fb11bfc67073c1a7450

    • SHA1

      2a1700745e6b7bb49cbf63476c6afe2dc9fd2b15

    • SHA256

      5a263e1964484df64bd2f665f55223967f0e35dd56d90aa944bc31dec84fd4e2

    • SHA512

      2dd034d957e2118d89e9a91a22fa6cee03cd1587d2d32be6c2a9af45c70be7aa5234503aba63146fc09b214b6e1459a2e918366363776320ced00d93349db7b4

    • SSDEEP

      24576:qVZj6AR51wrjsOBvpCphWYt/TBb4eBTWa/ZSjXuF77Lv+f6T8Qnskb2i6OBKaBWE:qV8RrJuphWYN9bjQgGXuFbq4TT+E

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks