Overview

overview

10

Static

static

10

d9c8b844ec...72.exe

windows7-x64

10

d9c8b844ec...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d9c8b844ecf471dcc39a55253c0d6672.exe

  • Size

    305KB

  • Sample

    231126-lt3aysge77

  • MD5

    d9c8b844ecf471dcc39a55253c0d6672

  • SHA1

    b89fd3b4cd3dfe967f490db25d6cdaeea9da9878

  • SHA256

    35126ace491bd539f41db2ba55e099d92b6846dfdae55e8f2b8c3c86cb6b92d8

  • SHA512

    35b0e364108c7a656b619d11eae459ac7d22573c13cbffef8483282c4de1e82a709704242cbc2f415ffa6e56a845b361fd07c2917aaf60cb62bfd6d6231dba53

  • SSDEEP

    3072:xc0+E8eBJAVHg7j+lc802eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDb0668:2YRGg76lc85dZMGXF5ahdt3b0668

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      d9c8b844ecf471dcc39a55253c0d6672.exe

    • Size

      305KB

    • MD5

      d9c8b844ecf471dcc39a55253c0d6672

    • SHA1

      b89fd3b4cd3dfe967f490db25d6cdaeea9da9878

    • SHA256

      35126ace491bd539f41db2ba55e099d92b6846dfdae55e8f2b8c3c86cb6b92d8

    • SHA512

      35b0e364108c7a656b619d11eae459ac7d22573c13cbffef8483282c4de1e82a709704242cbc2f415ffa6e56a845b361fd07c2917aaf60cb62bfd6d6231dba53

    • SSDEEP

      3072:xc0+E8eBJAVHg7j+lc802eS5pAgYIqGvJ6887lbyMGjXF1kqaholmtbCQVDb0668:2YRGg76lc85dZMGXF5ahdt3b0668

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks