Overview

overview

10

Static

static

10

2c7a52992f...cs.exe

windows7-x64

10

2c7a52992f...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2c7a52992f7b4c97c040749d92bb00e0_NeikiAnalytics.exe

  • Size

    669KB

  • Sample

    240604-exycvacg91

  • MD5

    2c7a52992f7b4c97c040749d92bb00e0

  • SHA1

    0c7cb61f7cbc9c964b8d9a3d4d4560a05504d21a

  • SHA256

    f53a2551a81b51e0bea007e9bcb6051c34b28650175eafd320cf7671318d4781

  • SHA512

    37c599d80b3b69183b161e2720720c7a28f57640715703b808d4cba28f5f737c7c3eac0cc2b8d4f15a0d626db5c1411cf4dd5f3f85576a91afacb96abb52dddb

  • SSDEEP

    12288:zhjIeVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:zhjzchMpQnqrdX72LbY6x46uR/qYglMi

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2c7a52992f7b4c97c040749d92bb00e0_NeikiAnalytics.exe

    • Size

      669KB

    • MD5

      2c7a52992f7b4c97c040749d92bb00e0

    • SHA1

      0c7cb61f7cbc9c964b8d9a3d4d4560a05504d21a

    • SHA256

      f53a2551a81b51e0bea007e9bcb6051c34b28650175eafd320cf7671318d4781

    • SHA512

      37c599d80b3b69183b161e2720720c7a28f57640715703b808d4cba28f5f737c7c3eac0cc2b8d4f15a0d626db5c1411cf4dd5f3f85576a91afacb96abb52dddb

    • SSDEEP

      12288:zhjIeVKhMpQnqr+cI3a72LXrY6x46UbR/qYglMi:zhjzchMpQnqrdX72LbY6x46uR/qYglMi

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks