berbew | bdf91c90e3f2909f2f74547bf5de2b6ceafd7a74e335d2c3c99d485fd8b24b3d

General

Target

NEAS.7db14bb6fa708b9f857bea7987bc8a60.exe
Size

168KB
Sample

231117-d88saafe6s
MD5

7db14bb6fa708b9f857bea7987bc8a60
SHA1

97869eb7b5fa48a32d657f08ba3e2baca571232b
SHA256

bdf91c90e3f2909f2f74547bf5de2b6ceafd7a74e335d2c3c99d485fd8b24b3d
SHA512

9744eb575f32763140fadc2e681e6e15f740e5f923b5d9211aa754e690dfdedbad5f8aec7ee5ad715379f7334703a990a68288727ae406a993ed5f8542f71f6c
SSDEEP

1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrQ:9mVwRKCbe+X5lR302U4kB

Score

10^/10

Malware Config

Targets

- Target
  
  NEAS.7db14bb6fa708b9f857bea7987bc8a60.exe
- Size
  
  168KB
- MD5
  
  7db14bb6fa708b9f857bea7987bc8a60
- SHA1
  
  97869eb7b5fa48a32d657f08ba3e2baca571232b
- SHA256
  
  bdf91c90e3f2909f2f74547bf5de2b6ceafd7a74e335d2c3c99d485fd8b24b3d
- SHA512
  
  9744eb575f32763140fadc2e681e6e15f740e5f923b5d9211aa754e690dfdedbad5f8aec7ee5ad715379f7334703a990a68288727ae406a993ed5f8542f71f6c
- SSDEEP
  
  1536:9eT7BVwxfvEFwjRbe+X9nw0lRxNm1V2UrEN7gJMVrQ:9mVwRKCbe+X5lR302U4kB
Score

10^/10

dropper evasion persistence trojan upx
- Malware Backdoor - Berbew
  Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
  persistence dropper trojan
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2