berbew | 61a99690b7a557383c20fc13a45ced39740f6645c85c5d1f9399725f899b754e

General

Target

NEAS.493d0a1c8734f34c7a2f95112be406d0.exe
Size

168KB
Sample

231102-t73smsgc9x
MD5

493d0a1c8734f34c7a2f95112be406d0
SHA1

8485cd0d8f95c8741a32c15cebbf99e8246c94dc
SHA256

61a99690b7a557383c20fc13a45ced39740f6645c85c5d1f9399725f899b754e
SHA512

957dd55c3359741e3270c6e432e27d813878145fd64ab196ebe8fc7fd3e1cca660ff5dcf608395f59bfe560477406fafe947c7b77b17dfe216ed62913fb4e0b9
SSDEEP

1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrr:9mVwRKCbe+X5lR302U4k6

Score

10^/10

Malware Config

Targets

- Target
  
  NEAS.493d0a1c8734f34c7a2f95112be406d0.exe
- Size
  
  168KB
- MD5
  
  493d0a1c8734f34c7a2f95112be406d0
- SHA1
  
  8485cd0d8f95c8741a32c15cebbf99e8246c94dc
- SHA256
  
  61a99690b7a557383c20fc13a45ced39740f6645c85c5d1f9399725f899b754e
- SHA512
  
  957dd55c3359741e3270c6e432e27d813878145fd64ab196ebe8fc7fd3e1cca660ff5dcf608395f59bfe560477406fafe947c7b77b17dfe216ed62913fb4e0b9
- SSDEEP
  
  1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrr:9mVwRKCbe+X5lR302U4k6
Score

10^/10

dropper evasion persistence trojan upx
- Malware Backdoor - Berbew
  Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
  persistence dropper trojan
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2