Overview

overview

10

Static

static

10

443241c59b...cs.exe

windows7-x64

10

443241c59b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    443241c59bc5583796f7a94c4a9678c0_NeikiAnalytics.exe

  • Size

    374KB

  • Sample

    240601-l7dvhsae29

  • MD5

    443241c59bc5583796f7a94c4a9678c0

  • SHA1

    3026a3b75eef99b5c4ddf87f96d6fd78da803e5e

  • SHA256

    f757ba854dd47950a58a1e242d97e787e368a437d1ceb4f5e57aad286282363f

  • SHA512

    5292ccbf7825424b14f853d35b94dddf57091a607c194f5205fce5ce0e47ed8c4de88611c0d75911542551105cd60d000199790050d52695a493d6102f340b2c

  • SSDEEP

    6144:H22H8Ij+4or+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:H22TjpqE6uidyzwr6AxfLeI1Su63lgMY

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      443241c59bc5583796f7a94c4a9678c0_NeikiAnalytics.exe

    • Size

      374KB

    • MD5

      443241c59bc5583796f7a94c4a9678c0

    • SHA1

      3026a3b75eef99b5c4ddf87f96d6fd78da803e5e

    • SHA256

      f757ba854dd47950a58a1e242d97e787e368a437d1ceb4f5e57aad286282363f

    • SHA512

      5292ccbf7825424b14f853d35b94dddf57091a607c194f5205fce5ce0e47ed8c4de88611c0d75911542551105cd60d000199790050d52695a493d6102f340b2c

    • SSDEEP

      6144:H22H8Ij+4or+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:H22TjpqE6uidyzwr6AxfLeI1Su63lgMY

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks