berbew | cd57b1bf62a9d3d96ac49b0d43cb4f20a39b85ae76ae9c702de7359a2f20f476

General

Target

0029912bc450651bddfbc481e9e1dc00.exe
Size

155KB
Sample

231126-ys7v9scc37
MD5

0029912bc450651bddfbc481e9e1dc00
SHA1

59a6707f8b7ab50341517044f7c5f86bc8543fb2
SHA256

cd57b1bf62a9d3d96ac49b0d43cb4f20a39b85ae76ae9c702de7359a2f20f476
SHA512

b1e8fb50a2388dab7d3c65aa362065a95e588f8e9169ce15706dc96c076fd0f0b71880d69f1c6968bde08aa8086da9079136e5190c4c80a6f9955d37239c408d
SSDEEP

1536:WeT7BVwxfvEFwjRzbi/aDdaQLSMBGO8i5adc6J2iRyD:WmVwRKCzbUac4BZ89dd2MyD

Score

10^/10

Malware Config

Targets

- Target
  
  0029912bc450651bddfbc481e9e1dc00.exe
- Size
  
  155KB
- MD5
  
  0029912bc450651bddfbc481e9e1dc00
- SHA1
  
  59a6707f8b7ab50341517044f7c5f86bc8543fb2
- SHA256
  
  cd57b1bf62a9d3d96ac49b0d43cb4f20a39b85ae76ae9c702de7359a2f20f476
- SHA512
  
  b1e8fb50a2388dab7d3c65aa362065a95e588f8e9169ce15706dc96c076fd0f0b71880d69f1c6968bde08aa8086da9079136e5190c4c80a6f9955d37239c408d
- SSDEEP
  
  1536:WeT7BVwxfvEFwjRzbi/aDdaQLSMBGO8i5adc6J2iRyD:WmVwRKCzbUac4BZ89dd2MyD
Score

10^/10

dropper evasion persistence trojan upx
- Malware Backdoor - Berbew
  Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
  persistence dropper trojan
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2