berbew | a0c1b2f607c0052b9dca932963be54d724fef1b6610eac8a32184620c54a7e1c

General

Target

NEAS.a7ecc75fd0530baeed81fcd2d1cc5f40.exe
Size

168KB
Sample

231111-fh2mdsah6s
MD5

a7ecc75fd0530baeed81fcd2d1cc5f40
SHA1

439a7ad534b18b14af00c86ccf478141988a0746
SHA256

a0c1b2f607c0052b9dca932963be54d724fef1b6610eac8a32184620c54a7e1c
SHA512

0004d7e49c8193ba571f0f4008de9c366b43ebf42c6e80ff76951fd5192e8c329cf70b455cc44c36bd4b15fb654b6d963abb3e2c674c124f8ecfb5b5a957214c
SSDEEP

1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVro:9mVwRKCbe+X5lR302U4kh

Score

10^/10

Malware Config

Targets

- Target
  
  NEAS.a7ecc75fd0530baeed81fcd2d1cc5f40.exe
- Size
  
  168KB
- MD5
  
  a7ecc75fd0530baeed81fcd2d1cc5f40
- SHA1
  
  439a7ad534b18b14af00c86ccf478141988a0746
- SHA256
  
  a0c1b2f607c0052b9dca932963be54d724fef1b6610eac8a32184620c54a7e1c
- SHA512
  
  0004d7e49c8193ba571f0f4008de9c366b43ebf42c6e80ff76951fd5192e8c329cf70b455cc44c36bd4b15fb654b6d963abb3e2c674c124f8ecfb5b5a957214c
- SSDEEP
  
  1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVro:9mVwRKCbe+X5lR302U4kh
Score

10^/10

dropper evasion persistence trojan upx
- Malware Backdoor - Berbew
  Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
  persistence dropper trojan
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2