Overview

overview

10

Static

static

10

25a56fc2f3...cs.exe

windows7-x64

10

25a56fc2f3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    25a56fc2f3b4fb0c1e4aa30e19942010_NeikiAnalytics.exe

  • Size

    1.2MB

  • Sample

    240527-jk9ybscg4x

  • MD5

    25a56fc2f3b4fb0c1e4aa30e19942010

  • SHA1

    7ace057643643d625851cd015bf0efb799add416

  • SHA256

    8613f9f54d3f12d24dde0913573deb9f4bdbaaf80b258552995650f520d0d2e8

  • SHA512

    d47e0d2deefc32c23c968574d4f35f921a5d0869f5e4e540424a8beadce796902a7dc83bcb2255bb06b08adf446db43a6dc1382438c513aaca525367ee9301c6

  • SSDEEP

    24576:rb2R+g8vyFXEMN8kQbt101CmY7cbGJr9P1kvxQtpEsdyayqbvI6rpmoEFFgPxoir:/2R+n4wXrBtgRg6NkDObltUt

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      25a56fc2f3b4fb0c1e4aa30e19942010_NeikiAnalytics.exe

    • Size

      1.2MB

    • MD5

      25a56fc2f3b4fb0c1e4aa30e19942010

    • SHA1

      7ace057643643d625851cd015bf0efb799add416

    • SHA256

      8613f9f54d3f12d24dde0913573deb9f4bdbaaf80b258552995650f520d0d2e8

    • SHA512

      d47e0d2deefc32c23c968574d4f35f921a5d0869f5e4e540424a8beadce796902a7dc83bcb2255bb06b08adf446db43a6dc1382438c513aaca525367ee9301c6

    • SSDEEP

      24576:rb2R+g8vyFXEMN8kQbt101CmY7cbGJr9P1kvxQtpEsdyayqbvI6rpmoEFFgPxoir:/2R+n4wXrBtgRg6NkDObltUt

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks