Overview

overview

10

Static

static

10

2a6b2e45e1...cs.exe

windows7-x64

10

2a6b2e45e1...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2a6b2e45e1349772bacf68aec0ddec90_NeikiAnalytics.exe

  • Size

    320KB

  • Sample

    240604-eg7xcach83

  • MD5

    2a6b2e45e1349772bacf68aec0ddec90

  • SHA1

    fb650b4e06fe7a2b8bbaa099079409c26bb7207e

  • SHA256

    81762be238353231ded7350aaebb53a35af90d7f8bdf281d28e90c7136e8ad9a

  • SHA512

    5a828daa811f67204e757184cb2fd046c13985fec2f6df879b62b3b04d629331a0e12624099604904e7e2401a69be0108c2745656c8c8e3a08d1c118a5a2d0d1

  • SSDEEP

    6144:30dnzoLrmD4EOkziPLAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUR:HAzYJ07kE0KoFtw2gu9RxrBIUbPLwH9J

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2a6b2e45e1349772bacf68aec0ddec90_NeikiAnalytics.exe

    • Size

      320KB

    • MD5

      2a6b2e45e1349772bacf68aec0ddec90

    • SHA1

      fb650b4e06fe7a2b8bbaa099079409c26bb7207e

    • SHA256

      81762be238353231ded7350aaebb53a35af90d7f8bdf281d28e90c7136e8ad9a

    • SHA512

      5a828daa811f67204e757184cb2fd046c13985fec2f6df879b62b3b04d629331a0e12624099604904e7e2401a69be0108c2745656c8c8e3a08d1c118a5a2d0d1

    • SSDEEP

      6144:30dnzoLrmD4EOkziPLAYCtE07kli0KoCYtw2B0Ddu9szWfx09UBIUbPLwH/lLOUR:HAzYJ07kE0KoFtw2gu9RxrBIUbPLwH9J

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks