berbew | a0e5eb707397597bd0651e358318e7e0407947e1247933d5ea976f68f71d318a

General

Target

0b0fdf699234287c565aa4af65ea0f60_NeikiAnalytics.exe
Size

155KB
Sample

240601-3gpb1aaf6w
MD5

0b0fdf699234287c565aa4af65ea0f60
SHA1

7e7bf1dbb904170136a5e1c6ddf30070fe0532a0
SHA256

a0e5eb707397597bd0651e358318e7e0407947e1247933d5ea976f68f71d318a
SHA512

d90e84295b87c37bf19a2404c9f87dceb44b1421067346fd129aca2944983c34f9c3ab63a233d545de111addff25fd5443fbccfc76d574566565692761960425
SSDEEP

1536:WeT7BVwxfvEFwjRzbi/aDdaQLSMBGO8i5adc6J2iRy8:WmVwRKCzbUac4BZ89dd2My8

Score

10^/10

Malware Config

Targets

- Target
  
  0b0fdf699234287c565aa4af65ea0f60_NeikiAnalytics.exe
- Size
  
  155KB
- MD5
  
  0b0fdf699234287c565aa4af65ea0f60
- SHA1
  
  7e7bf1dbb904170136a5e1c6ddf30070fe0532a0
- SHA256
  
  a0e5eb707397597bd0651e358318e7e0407947e1247933d5ea976f68f71d318a
- SHA512
  
  d90e84295b87c37bf19a2404c9f87dceb44b1421067346fd129aca2944983c34f9c3ab63a233d545de111addff25fd5443fbccfc76d574566565692761960425
- SSDEEP
  
  1536:WeT7BVwxfvEFwjRzbi/aDdaQLSMBGO8i5adc6J2iRy8:WmVwRKCzbUac4BZ89dd2My8
Score

10^/10

backdoor dropper evasion trojan upx
- Malware Dropper & Backdoor - Berbew
  Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
  backdoor trojan dropper
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Dropper & Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2