Overview

overview

10

Static

static

10

cbc90c2f1f...be.exe

windows7-x64

10

cbc90c2f1f...be.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cbc90c2f1f451db213486f7b2dcbdcbe.exe

  • Size

    305KB

  • Sample

    231127-t7af4aaa37

  • MD5

    cbc90c2f1f451db213486f7b2dcbdcbe

  • SHA1

    c7dd65ccaf8f058d9dce97a4d6e6451c1a8c554f

  • SHA256

    8a1b6d77bed5ce65921126c0508d70869d478cd928267e7025eadbcd36a88472

  • SHA512

    23d78116fcab977d48c60fe3fbbaa103cd03e2b1bdf765a53862bcb5888fedb2f2abe4f1ba8464fdf316589b281f23779c41d3fe3454f84af286dcb9198a67fe

  • SSDEEP

    6144:kDbiSbF8JdegNxunXe8yhrtMsQBvli+RQFdq:Ob67vAO8qRMsrOQF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      cbc90c2f1f451db213486f7b2dcbdcbe.exe

    • Size

      305KB

    • MD5

      cbc90c2f1f451db213486f7b2dcbdcbe

    • SHA1

      c7dd65ccaf8f058d9dce97a4d6e6451c1a8c554f

    • SHA256

      8a1b6d77bed5ce65921126c0508d70869d478cd928267e7025eadbcd36a88472

    • SHA512

      23d78116fcab977d48c60fe3fbbaa103cd03e2b1bdf765a53862bcb5888fedb2f2abe4f1ba8464fdf316589b281f23779c41d3fe3454f84af286dcb9198a67fe

    • SSDEEP

      6144:kDbiSbF8JdegNxunXe8yhrtMsQBvli+RQFdq:Ob67vAO8qRMsrOQF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks