Overview

overview

10

Static

static

10

35e08bfe1b...cs.exe

windows7-x64

10

35e08bfe1b...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    35e08bfe1b1a555bc16a3bc234a0f590_NeikiAnalytics.exe

  • Size

    357KB

  • Sample

    240604-gtywbaff3t

  • MD5

    35e08bfe1b1a555bc16a3bc234a0f590

  • SHA1

    cd09ff7e2fd1d2e4ebbdb11a1603bda8f8d9ef88

  • SHA256

    304d1f0894aeecca55fe4fc0e6f17f2d3b67a8ee809448836e346c50015c893b

  • SHA512

    1a36d8b5d59d8299bd5060149b28c784ea26beed5fff4fbeb986f11928ba74ba02b55effbe72dc1bb2cec2c55474b0ab5792b2b4e56d137acebfe78e80747411

  • SSDEEP

    6144:UBtA8wbg02bmj31n6xJmPMwZoXpKtCe8AUReheFlfSZR0SvsuFrGoyeg3kl+fiXt:qtADbg02KZoXpKtCe1eehil6ZR5ZrQe7

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      35e08bfe1b1a555bc16a3bc234a0f590_NeikiAnalytics.exe

    • Size

      357KB

    • MD5

      35e08bfe1b1a555bc16a3bc234a0f590

    • SHA1

      cd09ff7e2fd1d2e4ebbdb11a1603bda8f8d9ef88

    • SHA256

      304d1f0894aeecca55fe4fc0e6f17f2d3b67a8ee809448836e346c50015c893b

    • SHA512

      1a36d8b5d59d8299bd5060149b28c784ea26beed5fff4fbeb986f11928ba74ba02b55effbe72dc1bb2cec2c55474b0ab5792b2b4e56d137acebfe78e80747411

    • SSDEEP

      6144:UBtA8wbg02bmj31n6xJmPMwZoXpKtCe8AUReheFlfSZR0SvsuFrGoyeg3kl+fiXt:qtADbg02KZoXpKtCe1eehil6ZR5ZrQe7

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks