Overview

overview

10

Static

static

10

3caee06902...cs.exe

windows7-x64

10

3caee06902...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3caee06902e749662a01d291cb4d2b20_NeikiAnalytics.exe

  • Size

    109KB

  • Sample

    240604-h4caqshf98

  • MD5

    3caee06902e749662a01d291cb4d2b20

  • SHA1

    b04b38e6c386eda83da11d48ee889eb31e80f550

  • SHA256

    0b06d78155d67820655f7970e69e7eeada49d3f58d5bfc44e96f49462a5a5906

  • SHA512

    6790cf907366ffdc2077f66e27f791f37699d580516af007316f4eaeee9e02ba9f243f914c86ed2ed210e6825747e77db37ef0915f2c9d438db9ef5c0244e2b0

  • SSDEEP

    3072:KHWHlkUztnZRV2YR5R8wfJ9SLCqwzBu1DjHLMVDqqkSp:9FRnZRVEwfJ9mwtu1DjrFqh

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3caee06902e749662a01d291cb4d2b20_NeikiAnalytics.exe

    • Size

      109KB

    • MD5

      3caee06902e749662a01d291cb4d2b20

    • SHA1

      b04b38e6c386eda83da11d48ee889eb31e80f550

    • SHA256

      0b06d78155d67820655f7970e69e7eeada49d3f58d5bfc44e96f49462a5a5906

    • SHA512

      6790cf907366ffdc2077f66e27f791f37699d580516af007316f4eaeee9e02ba9f243f914c86ed2ed210e6825747e77db37ef0915f2c9d438db9ef5c0244e2b0

    • SSDEEP

      3072:KHWHlkUztnZRV2YR5R8wfJ9SLCqwzBu1DjHLMVDqqkSp:9FRnZRVEwfJ9mwtu1DjrFqh

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks