Overview

overview

10

Static

static

10

3321fac1f3...cs.exe

windows7-x64

10

3321fac1f3...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3321fac1f3898167594fa6b266fd3560_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240602-elxxyaah48

  • MD5

    3321fac1f3898167594fa6b266fd3560

  • SHA1

    343d6c289b56f48474cbabda1bcdd01e3d766235

  • SHA256

    9c01a1a081e2110dadfd2f4289092f062b537c831287415e9a5044e85da345f1

  • SHA512

    739c1e27c01735c056fee58f95c502d887246a458c527be4bcbecc27788a2b911b0780e8f6fa98da4a6fd68a5e45b125b07cce94e3201cec837a97670917c0a8

  • SSDEEP

    6144:GtqCA1Mlgdpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1s:GHA3pV6yYPI3cpV6yYPZ0PVdvcY9+8hn

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3321fac1f3898167594fa6b266fd3560_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      3321fac1f3898167594fa6b266fd3560

    • SHA1

      343d6c289b56f48474cbabda1bcdd01e3d766235

    • SHA256

      9c01a1a081e2110dadfd2f4289092f062b537c831287415e9a5044e85da345f1

    • SHA512

      739c1e27c01735c056fee58f95c502d887246a458c527be4bcbecc27788a2b911b0780e8f6fa98da4a6fd68a5e45b125b07cce94e3201cec837a97670917c0a8

    • SSDEEP

      6144:GtqCA1Mlgdpui6yYPaIGckpyWO63t5YNpui6yYPaIGcky0PVd68LwYwI+8mkUr1s:GHA3pV6yYPI3cpV6yYPZ0PVdvcY9+8hn

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks