Overview

overview

10

Static

static

10

6e3060e028...cs.exe

windows7-x64

10

6e3060e028...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6e3060e0283732ab49c445ab40128470_NeikiAnalytics.exe

  • Size

    448KB

  • Sample

    240531-acj79sgc53

  • MD5

    6e3060e0283732ab49c445ab40128470

  • SHA1

    7b2abd49eea3dc18b2032f965944338a93e8efba

  • SHA256

    cd9fb30ef57e1c6e3b294282f81f5aee65f508f4d63956dc36a6927164d68a8c

  • SHA512

    6acf5b912998691053c3907f36edbac9cf81240f04ff4076f25fc13008acc79a845f770901c20f8612d091d65794ec4254a70a3ee0cf229ef716a944420a256f

  • SSDEEP

    12288:1AQ6jn2Hk0ftYmI1TCU4rWNSIOsbJBsbrgAeCiIMiFkmZzcukG2/:1/672HkKtYmI1TCONSIT4gAeCiITzcui

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      6e3060e0283732ab49c445ab40128470_NeikiAnalytics.exe

    • Size

      448KB

    • MD5

      6e3060e0283732ab49c445ab40128470

    • SHA1

      7b2abd49eea3dc18b2032f965944338a93e8efba

    • SHA256

      cd9fb30ef57e1c6e3b294282f81f5aee65f508f4d63956dc36a6927164d68a8c

    • SHA512

      6acf5b912998691053c3907f36edbac9cf81240f04ff4076f25fc13008acc79a845f770901c20f8612d091d65794ec4254a70a3ee0cf229ef716a944420a256f

    • SSDEEP

      12288:1AQ6jn2Hk0ftYmI1TCU4rWNSIOsbJBsbrgAeCiIMiFkmZzcukG2/:1/672HkKtYmI1TCONSIT4gAeCiITzcui

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks