Overview

overview

10

Static

static

10

8bdf17f25f...cs.exe

windows7-x64

10

8bdf17f25f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8bdf17f25f8f983ca0db36c577d1f860_NeikiAnalytics.exe

  • Size

    128KB

  • Sample

    240601-d25gaagd3t

  • MD5

    8bdf17f25f8f983ca0db36c577d1f860

  • SHA1

    af66bb4d1f7ee7ffb0d655c57c24f032a545a7f6

  • SHA256

    72badcbf219f22d1c02adb6995a5119b2146305cb0894e18ced576c7a1d4bc8d

  • SHA512

    0882a0260c2a105e68f52dd16ab837e1667459e1fc2e094a8259c4a22b77ef219e0af806bf75a16383b074ece4b648d6fe0c9db168e2a114824b8405d3f48ae1

  • SSDEEP

    1536:nJBr2cFTpr0Pi9ysBd8oaqCwxFBszoM4vRQDaRfRa9HprmRfRJCLIXG:JBr24FuuncqCwxFFveDa5wkpHxG

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      8bdf17f25f8f983ca0db36c577d1f860_NeikiAnalytics.exe

    • Size

      128KB

    • MD5

      8bdf17f25f8f983ca0db36c577d1f860

    • SHA1

      af66bb4d1f7ee7ffb0d655c57c24f032a545a7f6

    • SHA256

      72badcbf219f22d1c02adb6995a5119b2146305cb0894e18ced576c7a1d4bc8d

    • SHA512

      0882a0260c2a105e68f52dd16ab837e1667459e1fc2e094a8259c4a22b77ef219e0af806bf75a16383b074ece4b648d6fe0c9db168e2a114824b8405d3f48ae1

    • SSDEEP

      1536:nJBr2cFTpr0Pi9ysBd8oaqCwxFBszoM4vRQDaRfRa9HprmRfRJCLIXG:JBr24FuuncqCwxFFveDa5wkpHxG

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks