Overview

overview

10

Static

static

10

cad647db1c...f5.exe

windows7-x64

10

cad647db1c...f5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cad647db1c7714d279caf9c2889e8af5.exe

  • Size

    407KB

  • Sample

    231126-mb16lsgg44

  • MD5

    cad647db1c7714d279caf9c2889e8af5

  • SHA1

    06bd7166d10d4671c709995ce7c7345a43b5bde5

  • SHA256

    0d3617ddcd6cffeda0480e963617df892248c9a4047104cebdee03e2c9d6417b

  • SHA512

    3d2e0088512934649d15a60fbdd119cc97faa54ac517fc32935a6c8aebfdb34732a169700248e00a2c61047aee4befdebe108c8efef164188c15ad33347c0b2e

  • SSDEEP

    12288:2s3h1NJO/awrSmfyiPFg8prNdw+C7797TnPtLU8deJUP//zk9FGB:2CJO/awrSmfyiPFg8prNdw+C7797TnP/

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      cad647db1c7714d279caf9c2889e8af5.exe

    • Size

      407KB

    • MD5

      cad647db1c7714d279caf9c2889e8af5

    • SHA1

      06bd7166d10d4671c709995ce7c7345a43b5bde5

    • SHA256

      0d3617ddcd6cffeda0480e963617df892248c9a4047104cebdee03e2c9d6417b

    • SHA512

      3d2e0088512934649d15a60fbdd119cc97faa54ac517fc32935a6c8aebfdb34732a169700248e00a2c61047aee4befdebe108c8efef164188c15ad33347c0b2e

    • SSDEEP

      12288:2s3h1NJO/awrSmfyiPFg8prNdw+C7797TnPtLU8deJUP//zk9FGB:2CJO/awrSmfyiPFg8prNdw+C7797TnP/

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks