Overview

overview

10

Static

static

10

4df0ef6655...cs.exe

windows7-x64

10

4df0ef6655...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe

  • Size

    768KB

  • Sample

    240605-lb9bjscf67

  • MD5

    4df0ef6655cfc3d7696f740439571db0

  • SHA1

    afd880e380a7a30cac065859aeb6fc5ad857a3dc

  • SHA256

    04cf09d68bbc9b6e66be627b5ee48b550d7ad6421feb37f1218c0806afba0555

  • SHA512

    a9c464f5bf95e71d3b81810a0876b40364807a93918538e86baf1ac0211b721158c6627c8e362512b64fabb91632b6018bda7389d27c17888245de07759c14d4

  • SSDEEP

    24576:qW298E8ufgSRWPod2nRs4AKgzyw0ZN+pUdGOvCJw26cV/JKuylm69T:a98E8u4nAdJ4AKgzyw0ZN+pUdGECJwNZ

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      4df0ef6655cfc3d7696f740439571db0_NeikiAnalytics.exe

    • Size

      768KB

    • MD5

      4df0ef6655cfc3d7696f740439571db0

    • SHA1

      afd880e380a7a30cac065859aeb6fc5ad857a3dc

    • SHA256

      04cf09d68bbc9b6e66be627b5ee48b550d7ad6421feb37f1218c0806afba0555

    • SHA512

      a9c464f5bf95e71d3b81810a0876b40364807a93918538e86baf1ac0211b721158c6627c8e362512b64fabb91632b6018bda7389d27c17888245de07759c14d4

    • SSDEEP

      24576:qW298E8ufgSRWPod2nRs4AKgzyw0ZN+pUdGOvCJw26cV/JKuylm69T:a98E8u4nAdJ4AKgzyw0ZN+pUdGECJwNZ

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks