Overview

overview

10

Static

static

10

a9b7bc07b7...40.exe

windows7-x64

10

a9b7bc07b7...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a9b7bc07b7a800401b341542bf1d9940.exe

  • Size

    291KB

  • Sample

    231126-yrat5scb53

  • MD5

    a9b7bc07b7a800401b341542bf1d9940

  • SHA1

    0261350de4abd2cf55bd37023852e7d33c429d29

  • SHA256

    d7e88016e1d7581cede4b9b7b78d204b64571b9242378506efa0f0f3cecd61c5

  • SHA512

    1c702e3eadf11fb3b00450ed9819b67032ce974fc4821e3dfb4e864172ce3a51eded6caf7509dc02bae363f57dd7fa58f200631c120016ecd39ef44491cce140

  • SSDEEP

    6144:aSyuwSdx3Dxwz3np9Zy5WKpFVE2mA13m5VyShpUCV/5TQd+lWWjsyKwlCejw7Y38:SuVxG9Zy5W+E2b13mryShpU6ZQUlOyH0

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      a9b7bc07b7a800401b341542bf1d9940.exe

    • Size

      291KB

    • MD5

      a9b7bc07b7a800401b341542bf1d9940

    • SHA1

      0261350de4abd2cf55bd37023852e7d33c429d29

    • SHA256

      d7e88016e1d7581cede4b9b7b78d204b64571b9242378506efa0f0f3cecd61c5

    • SHA512

      1c702e3eadf11fb3b00450ed9819b67032ce974fc4821e3dfb4e864172ce3a51eded6caf7509dc02bae363f57dd7fa58f200631c120016ecd39ef44491cce140

    • SSDEEP

      6144:aSyuwSdx3Dxwz3np9Zy5WKpFVE2mA13m5VyShpUCV/5TQd+lWWjsyKwlCejw7Y38:SuVxG9Zy5W+E2b13mryShpU6ZQUlOyH0

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks