Overview

overview

10

Static

static

10

116492ae61...cs.exe

windows7-x64

10

116492ae61...cs.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    116492ae6163d812b042a03c5f39fdd0_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240603-3gwfbadh54

  • MD5

    116492ae6163d812b042a03c5f39fdd0

  • SHA1

    fb8cd8d5b011fc6789be15174e049711d90735a2

  • SHA256

    00b133839b6187bda08c205b39e822c75be03fc7788818356bad22d695866876

  • SHA512

    434c089bb26e54c603fe817b34df2e57f4d32ba43ae354c6e94a8ef20cefea6121a86c7bf806a0050b625dcd8286d11f47b690c60c1221d1e0eebf12c6d32102

  • SSDEEP

    6144:VE9pd3fHCzhwn7fz3LvDHb/TXrPjfz3LvZayepui6yYPaIGckjh/xaSfBJKFbhDx:VE9rqwn7fz3LvDHb/TXrPjfz3LvZkpVI

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      116492ae6163d812b042a03c5f39fdd0_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      116492ae6163d812b042a03c5f39fdd0

    • SHA1

      fb8cd8d5b011fc6789be15174e049711d90735a2

    • SHA256

      00b133839b6187bda08c205b39e822c75be03fc7788818356bad22d695866876

    • SHA512

      434c089bb26e54c603fe817b34df2e57f4d32ba43ae354c6e94a8ef20cefea6121a86c7bf806a0050b625dcd8286d11f47b690c60c1221d1e0eebf12c6d32102

    • SSDEEP

      6144:VE9pd3fHCzhwn7fz3LvDHb/TXrPjfz3LvZayepui6yYPaIGckjh/xaSfBJKFbhDx:VE9rqwn7fz3LvDHb/TXrPjfz3LvZkpVI

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks