Overview

overview

10

Static

static

10

505183ef2c...cs.exe

windows7-x64

10

505183ef2c...cs.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    505183ef2c8570bf8028f8d1e944cb60_NeikiAnalytics.exe

  • Size

    1004KB

  • Sample

    240605-mh8t2ada5w

  • MD5

    505183ef2c8570bf8028f8d1e944cb60

  • SHA1

    a21963da4eb3f7f75893fe5cbb2ebd5323b1bc56

  • SHA256

    682b9d5f4e972940de54d6812257c725be1871bfeb202d1eae1e33d06a6418c1

  • SHA512

    de1949de9d5623b038028bae34e9a93a5a7d11e9fed4abd93f71a6f7890fa1b673c5c200febbb32344425a81331dffc0aab83ce743cf091e03706c0e59b29b46

  • SSDEEP

    24576:QkdIHFimTWuSi5FFyPrpXsok09exEOiX0a/ZSCBHn677:QKIHFRSiIlpk099OiX0gVBHn6

Score
10/10
berbewbackdoordroppertrojan

Malware Config

Targets

    • Target

      505183ef2c8570bf8028f8d1e944cb60_NeikiAnalytics.exe

    • Size

      1004KB

    • MD5

      505183ef2c8570bf8028f8d1e944cb60

    • SHA1

      a21963da4eb3f7f75893fe5cbb2ebd5323b1bc56

    • SHA256

      682b9d5f4e972940de54d6812257c725be1871bfeb202d1eae1e33d06a6418c1

    • SHA512

      de1949de9d5623b038028bae34e9a93a5a7d11e9fed4abd93f71a6f7890fa1b673c5c200febbb32344425a81331dffc0aab83ce743cf091e03706c0e59b29b46

    • SSDEEP

      24576:QkdIHFimTWuSi5FFyPrpXsok09exEOiX0a/ZSCBHn677:QKIHFRSiIlpk099OiX0gVBHn6

    Score
    10/10
    backdoordroppertrojan

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v13

Tasks