Overview

overview

10

Static

static

10

012a72f8f3...cs.exe

windows7-x64

10

012a72f8f3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    012a72f8f3eb95e78b139082685be820_NeikiAnalytics.exe

  • Size

    94KB

  • Sample

    240531-tmr6eaec59

  • MD5

    012a72f8f3eb95e78b139082685be820

  • SHA1

    5da21b15bb67bba600c380cc27355e45b7b64d28

  • SHA256

    ea1dd0472883fd767f16882a7adbd38facdb94039a1b26458c7288b1d5bd9d6f

  • SHA512

    50aca8dc360199b2f973881b37f4f5b3a707a31bef3b1bc3efd8fb62ef00ee15e631de24cd6b662f44ec7338443d9a74191983c3af9253e20b34ac304f949445

  • SSDEEP

    1536:XIJUpFAtUau1hcMowyeJhQ9V2L2LaIZTJ+7LhkiB0MPiKeEAgv:XqUpFmJMpJhQ8YaMU7uihJ5v

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      012a72f8f3eb95e78b139082685be820_NeikiAnalytics.exe

    • Size

      94KB

    • MD5

      012a72f8f3eb95e78b139082685be820

    • SHA1

      5da21b15bb67bba600c380cc27355e45b7b64d28

    • SHA256

      ea1dd0472883fd767f16882a7adbd38facdb94039a1b26458c7288b1d5bd9d6f

    • SHA512

      50aca8dc360199b2f973881b37f4f5b3a707a31bef3b1bc3efd8fb62ef00ee15e631de24cd6b662f44ec7338443d9a74191983c3af9253e20b34ac304f949445

    • SSDEEP

      1536:XIJUpFAtUau1hcMowyeJhQ9V2L2LaIZTJ+7LhkiB0MPiKeEAgv:XqUpFmJMpJhQ8YaMU7uihJ5v

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks