Overview

overview

10

Static

static

10

2dca942b64...cs.exe

windows7-x64

10

2dca942b64...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2dca942b640d9e0de64bab544a9eee90_NeikiAnalytics.exe

  • Size

    640KB

  • Sample

    240604-e79tmadc51

  • MD5

    2dca942b640d9e0de64bab544a9eee90

  • SHA1

    fc3d646fb987aee7a596418a1c4d98c21913af23

  • SHA256

    e3f864a8054bf2a554b384e82db110ab140441ffcd3b4297b91bc8f78c0ce4fb

  • SHA512

    74a5f9307f4eb0963e6b3b89655ef784e44f1ae63f6247d3b27f29165d463287d12404ced82e21bdc61f9479d39694ffd0e7a925a8308a63e5befecebfc0edc7

  • SSDEEP

    12288:gIZRBcb1dXHaINIVIIVy2oIvPKiK13fS2hEYM9RIPk:gT1dXHfNIVIIVy2jU13fS2hEYM9RIPk

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2dca942b640d9e0de64bab544a9eee90_NeikiAnalytics.exe

    • Size

      640KB

    • MD5

      2dca942b640d9e0de64bab544a9eee90

    • SHA1

      fc3d646fb987aee7a596418a1c4d98c21913af23

    • SHA256

      e3f864a8054bf2a554b384e82db110ab140441ffcd3b4297b91bc8f78c0ce4fb

    • SHA512

      74a5f9307f4eb0963e6b3b89655ef784e44f1ae63f6247d3b27f29165d463287d12404ced82e21bdc61f9479d39694ffd0e7a925a8308a63e5befecebfc0edc7

    • SSDEEP

      12288:gIZRBcb1dXHaINIVIIVy2oIvPKiK13fS2hEYM9RIPk:gT1dXHfNIVIIVy2jU13fS2hEYM9RIPk

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks