Overview

overview

10

Static

static

10

ef58f79ecc...cs.exe

windows7-x64

10

ef58f79ecc...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ef58f79ecc93e01cae265a04efdc1410_NeikiAnalytics.exe

  • Size

    229KB

  • Sample

    240531-ryencacb46

  • MD5

    ef58f79ecc93e01cae265a04efdc1410

  • SHA1

    4af73eddcf30598e8553f790cf27fa5bd82acc9d

  • SHA256

    3a6b635e79042be0c2300abbcfbefa8b1b095f3a4c3cf7982ccc9885b7b98c78

  • SHA512

    75ca76dff6b2a2c575da521652d3a384f2d572f257dd87e0f86b159c78ed9d5cd6accb6d32935fa6615d8d4ac56432b181a265f93956388a718fbf612848dfb9

  • SSDEEP

    6144:HIvThqCMD7Dq/271+HZ/pvkym/89bYEwPhCKvav:ovThqVL7AIfFfvav

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ef58f79ecc93e01cae265a04efdc1410_NeikiAnalytics.exe

    • Size

      229KB

    • MD5

      ef58f79ecc93e01cae265a04efdc1410

    • SHA1

      4af73eddcf30598e8553f790cf27fa5bd82acc9d

    • SHA256

      3a6b635e79042be0c2300abbcfbefa8b1b095f3a4c3cf7982ccc9885b7b98c78

    • SHA512

      75ca76dff6b2a2c575da521652d3a384f2d572f257dd87e0f86b159c78ed9d5cd6accb6d32935fa6615d8d4ac56432b181a265f93956388a718fbf612848dfb9

    • SSDEEP

      6144:HIvThqCMD7Dq/271+HZ/pvkym/89bYEwPhCKvav:ovThqVL7AIfFfvav

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks