Overview

overview

10

Static

static

10

1734c08231...cs.exe

windows7-x64

10

1734c08231...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1734c082310e36151f35eff345b19620_NeikiAnalytics.exe

  • Size

    664KB

  • Sample

    240604-arn5rsfd98

  • MD5

    1734c082310e36151f35eff345b19620

  • SHA1

    3f3762ae825d56ffe91ec5e3e6c79c3c5fa74a9a

  • SHA256

    dbb08990fa1c249eaa7eda4c3d6db3f3eacbcb339f585e5dc475db3c6b0f8a6d

  • SHA512

    20ec97545eed7218379af50bffb407bf48851d1e9f28472a8f2127053a2027d9298cad58309100909e72cb5fcb3e4f85d0ff2de2830139cb91e5200af6b4b5e4

  • SSDEEP

    12288:NaPpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:NYWVWleKWNUir2MhNl6zX3w9As/xO23U

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      1734c082310e36151f35eff345b19620_NeikiAnalytics.exe

    • Size

      664KB

    • MD5

      1734c082310e36151f35eff345b19620

    • SHA1

      3f3762ae825d56ffe91ec5e3e6c79c3c5fa74a9a

    • SHA256

      dbb08990fa1c249eaa7eda4c3d6db3f3eacbcb339f585e5dc475db3c6b0f8a6d

    • SHA512

      20ec97545eed7218379af50bffb407bf48851d1e9f28472a8f2127053a2027d9298cad58309100909e72cb5fcb3e4f85d0ff2de2830139cb91e5200af6b4b5e4

    • SSDEEP

      12288:NaPpV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjmR54F:NYWVWleKWNUir2MhNl6zX3w9As/xO23U

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks