Overview

overview

10

Static

static

10

fcb18a9568...20.exe

windows7-x64

10

fcb18a9568...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    fcb18a9568005f1a9049b36825eacd20.exe

  • Size

    492KB

  • Sample

    231127-vgv6jsad3x

  • MD5

    fcb18a9568005f1a9049b36825eacd20

  • SHA1

    e066d40ce69bd77c74cf2f0a63d96477b8c90af9

  • SHA256

    2d9b9299eb873b34267c6a33f6d4c1503ee11d5c87464a9e3784c62b7551b64f

  • SHA512

    2266b7e7205b5aa2d45b568652bc318bd4d9dffcb0a0043cd7d24e5c232cfe6ccec1da8d36832f8e060b5e81ed192175b90c75525a3cb0e7c821596c73332036

  • SSDEEP

    12288:mz8jEObWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:7jXvzecvsy

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      fcb18a9568005f1a9049b36825eacd20.exe

    • Size

      492KB

    • MD5

      fcb18a9568005f1a9049b36825eacd20

    • SHA1

      e066d40ce69bd77c74cf2f0a63d96477b8c90af9

    • SHA256

      2d9b9299eb873b34267c6a33f6d4c1503ee11d5c87464a9e3784c62b7551b64f

    • SHA512

      2266b7e7205b5aa2d45b568652bc318bd4d9dffcb0a0043cd7d24e5c232cfe6ccec1da8d36832f8e060b5e81ed192175b90c75525a3cb0e7c821596c73332036

    • SSDEEP

      12288:mz8jEObWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:7jXvzecvsy

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks