Overview

overview

10

Static

static

10

7a4a8aa4c3...cs.exe

windows7-x64

10

7a4a8aa4c3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    7a4a8aa4c3451dd93fa4b2d62938a520_NeikiAnalytics.exe

  • Size

    368KB

  • Sample

    240602-2ptq1sah93

  • MD5

    7a4a8aa4c3451dd93fa4b2d62938a520

  • SHA1

    25ed71623144c7b74ffc9cfcb3e731f577fc581b

  • SHA256

    6e8b492c0fc0fcfe181270d1564deec618c3fa976497a313833bd9ecee47f7d9

  • SHA512

    273ee4d5e505ee5c43efe7df5e567f2411ce3808acb1f3a4dc84cff4d8ce681da1b2511172f75560813bb51eb10e95fe3e088061390ccd9dd0298ec51d456a09

  • SSDEEP

    6144:cOc/WMVf7Evlu0ZtE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOA:cO4WUD6U0IaAD6RrI1+lDMEAD6Rr2NWL

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      7a4a8aa4c3451dd93fa4b2d62938a520_NeikiAnalytics.exe

    • Size

      368KB

    • MD5

      7a4a8aa4c3451dd93fa4b2d62938a520

    • SHA1

      25ed71623144c7b74ffc9cfcb3e731f577fc581b

    • SHA256

      6e8b492c0fc0fcfe181270d1564deec618c3fa976497a313833bd9ecee47f7d9

    • SHA512

      273ee4d5e505ee5c43efe7df5e567f2411ce3808acb1f3a4dc84cff4d8ce681da1b2511172f75560813bb51eb10e95fe3e088061390ccd9dd0298ec51d456a09

    • SSDEEP

      6144:cOc/WMVf7Evlu0ZtE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOA:cO4WUD6U0IaAD6RrI1+lDMEAD6Rr2NWL

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks