Overview

overview

10

Static

static

10

3e26337880...cs.exe

windows7-x64

10

3e26337880...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3e26337880f4abfe8f39d2f01aabb410_NeikiAnalytics.exe

  • Size

    384KB

  • Sample

    240604-jckngahe9s

  • MD5

    3e26337880f4abfe8f39d2f01aabb410

  • SHA1

    04d385bd082512017337029cda48008e89584340

  • SHA256

    c7a352d23331c2034a083a0940d39e68e377e0271dd4dce0f61214703cbe9f3b

  • SHA512

    56888b8aa41c2c6529255e3011e6e04e53a12f896983675bc38463cefdece980aec8e9e07463ea968e63891f612b02d88a2ca0847201add20484aadb2690cc2b

  • SSDEEP

    6144:wLaUbIeLjK2kjr6h6JnjXWpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGcl:L81pV6yYPMLnfBJKFbhDwBpV6yYP0riN

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      3e26337880f4abfe8f39d2f01aabb410_NeikiAnalytics.exe

    • Size

      384KB

    • MD5

      3e26337880f4abfe8f39d2f01aabb410

    • SHA1

      04d385bd082512017337029cda48008e89584340

    • SHA256

      c7a352d23331c2034a083a0940d39e68e377e0271dd4dce0f61214703cbe9f3b

    • SHA512

      56888b8aa41c2c6529255e3011e6e04e53a12f896983675bc38463cefdece980aec8e9e07463ea968e63891f612b02d88a2ca0847201add20484aadb2690cc2b

    • SSDEEP

      6144:wLaUbIeLjK2kjr6h6JnjXWpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGcl:L81pV6yYPMLnfBJKFbhDwBpV6yYP0riN

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks