Overview

overview

10

Static

static

10

c2bcba43af...57.exe

windows7-x64

10

c2bcba43af...57.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2bcba43afcc330e01ddc2c76bd9d857.exe

  • Size

    143KB

  • Sample

    231127-vf3h8sac9x

  • MD5

    c2bcba43afcc330e01ddc2c76bd9d857

  • SHA1

    4ebaf623d209130effeb51f15c24b429f8c8a897

  • SHA256

    ebc9f734d7dcb88e3efffed7345c32e4367b521c30d4c8d7b3cd6c9841c3909a

  • SHA512

    09d15c66413dc13f739146d39b52d667f5226c226bad1750fdca7efc42405575473abf4459e9fa6afb7a2810b510c352494245c0b2b66908a5b9f8a4ee33196f

  • SSDEEP

    3072:N0upez+bnBRNVrPqX3N93bsGfhv0vt3y:Lez+bnBRDPqX3vLsGZv0vti

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      c2bcba43afcc330e01ddc2c76bd9d857.exe

    • Size

      143KB

    • MD5

      c2bcba43afcc330e01ddc2c76bd9d857

    • SHA1

      4ebaf623d209130effeb51f15c24b429f8c8a897

    • SHA256

      ebc9f734d7dcb88e3efffed7345c32e4367b521c30d4c8d7b3cd6c9841c3909a

    • SHA512

      09d15c66413dc13f739146d39b52d667f5226c226bad1750fdca7efc42405575473abf4459e9fa6afb7a2810b510c352494245c0b2b66908a5b9f8a4ee33196f

    • SSDEEP

      3072:N0upez+bnBRNVrPqX3N93bsGfhv0vt3y:Lez+bnBRDPqX3vLsGZv0vti

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks