Overview

overview

10

Static

static

10

3924f69506...cs.exe

windows7-x64

10

3924f69506...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3924f69506f053c5ba22591dd037bb70_NeikiAnalytics.exe

  • Size

    664KB

  • Sample

    240604-hewm3sgd5s

  • MD5

    3924f69506f053c5ba22591dd037bb70

  • SHA1

    c41347cad19726d7af20c06d5a422d8419e16235

  • SHA256

    2f68f72e9150132396e4ca11dfc7ce39c149a30232dcb18ff755d1244b06a98c

  • SHA512

    f499db10cd5d87e1400031b0b0e0ce9cb2e2b9ef2b224b8f2aa79a5bc757292e798214b1c5c66152ece1b389551c5227e81305e8127b03e5a9b1b201eeb73ae0

  • SSDEEP

    12288:kWhCqODAupV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYx:kWqLWVWleKWNUir2MhNl6zX3w9As/xOX

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3924f69506f053c5ba22591dd037bb70_NeikiAnalytics.exe

    • Size

      664KB

    • MD5

      3924f69506f053c5ba22591dd037bb70

    • SHA1

      c41347cad19726d7af20c06d5a422d8419e16235

    • SHA256

      2f68f72e9150132396e4ca11dfc7ce39c149a30232dcb18ff755d1244b06a98c

    • SHA512

      f499db10cd5d87e1400031b0b0e0ce9cb2e2b9ef2b224b8f2aa79a5bc757292e798214b1c5c66152ece1b389551c5227e81305e8127b03e5a9b1b201eeb73ae0

    • SSDEEP

      12288:kWhCqODAupV6yYPVpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYx:kWqLWVWleKWNUir2MhNl6zX3w9As/xOX

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks