Overview

overview

10

Static

static

10

38ee897199...cs.exe

windows7-x64

10

38ee897199...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    38ee89719939960c0223cd2c7df00d90_NeikiAnalytics.exe

  • Size

    1.6MB

  • Sample

    240604-hdqqfagh37

  • MD5

    38ee89719939960c0223cd2c7df00d90

  • SHA1

    8deb8d54f73e3f1d54fdcc4317326c1ab103004d

  • SHA256

    64a2e014ac3b88d128f342b9361b7b6ebc0a2f9e3ccbb7b78566bc27dd6f5f9e

  • SHA512

    928236e728a69b78f28a36d9dae9c715eebca1fd097432eb5cd29ea53bbb6eac4742476a7317802649263028b9c7958de6c4b7462748622c96fc7dce448f4857

  • SSDEEP

    24576:j7VuSwwL2vzecI50+YNpsKv2EvZHp3oWB+:cSwwL2vKcIKLXZ3+

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      38ee89719939960c0223cd2c7df00d90_NeikiAnalytics.exe

    • Size

      1.6MB

    • MD5

      38ee89719939960c0223cd2c7df00d90

    • SHA1

      8deb8d54f73e3f1d54fdcc4317326c1ab103004d

    • SHA256

      64a2e014ac3b88d128f342b9361b7b6ebc0a2f9e3ccbb7b78566bc27dd6f5f9e

    • SHA512

      928236e728a69b78f28a36d9dae9c715eebca1fd097432eb5cd29ea53bbb6eac4742476a7317802649263028b9c7958de6c4b7462748622c96fc7dce448f4857

    • SSDEEP

      24576:j7VuSwwL2vzecI50+YNpsKv2EvZHp3oWB+:cSwwL2vKcIKLXZ3+

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks