Overview

overview

10

Static

static

10

e0945432d4...d1.exe

windows7-x64

10

e0945432d4...d1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e0945432d466b66d221695448e0f6ed1.exe

  • Size

    107KB

  • Sample

    231126-lt91ssgf3s

  • MD5

    e0945432d466b66d221695448e0f6ed1

  • SHA1

    9560c07c3a828562bed4ccacb1e1a40833308858

  • SHA256

    dbb43ee8fb70c5d9af4a020f430780958f0ebf14658f274a1788604389fdd6e1

  • SHA512

    4a65ddc46006cf53e289847e644966fac01306f5c2d20aaf8e99018bd67cf62691cd8754be1eedb0587aa72fc4f16d2f1296a1b4a6c81ae861b525e51a88ed05

  • SSDEEP

    1536:crYbhJw+V5yhY1LF6U9u2LCaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:crYbhFLyh456WzCaMU7uihJ5233y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      e0945432d466b66d221695448e0f6ed1.exe

    • Size

      107KB

    • MD5

      e0945432d466b66d221695448e0f6ed1

    • SHA1

      9560c07c3a828562bed4ccacb1e1a40833308858

    • SHA256

      dbb43ee8fb70c5d9af4a020f430780958f0ebf14658f274a1788604389fdd6e1

    • SHA512

      4a65ddc46006cf53e289847e644966fac01306f5c2d20aaf8e99018bd67cf62691cd8754be1eedb0587aa72fc4f16d2f1296a1b4a6c81ae861b525e51a88ed05

    • SSDEEP

      1536:crYbhJw+V5yhY1LF6U9u2LCaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:crYbhFLyh456WzCaMU7uihJ5233y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks