Overview

overview

10

Static

static

10

0dbb4bc5ad...ab.exe

windows7-x64

10

0dbb4bc5ad...ab.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0dbb4bc5ad9f1761c1b000b3120a9cab.exe

  • Size

    96KB

  • Sample

    231127-vveeysag4z

  • MD5

    0dbb4bc5ad9f1761c1b000b3120a9cab

  • SHA1

    aacda17bb4d9064043235907e284cc5346edce2c

  • SHA256

    df3357cf8aec20a2a4e654c61658f628ba02249c396cb4691a8a9829912b6bfa

  • SHA512

    ff50b89ef6ec490dd063ac2e877372fdb9c9fb84cf8cfea6aa060a51a93da1e95695c467e1b3a1d808f5025bc5442fea4b4e73a3720e689d01f48b1a53a94298

  • SSDEEP

    1536:xK5oMjFX92lax0zsC+fgOKn4IVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhVsWzRM:xKPz2Eyw+n4IVqZ2fQkbn1vVAva63Hem

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      0dbb4bc5ad9f1761c1b000b3120a9cab.exe

    • Size

      96KB

    • MD5

      0dbb4bc5ad9f1761c1b000b3120a9cab

    • SHA1

      aacda17bb4d9064043235907e284cc5346edce2c

    • SHA256

      df3357cf8aec20a2a4e654c61658f628ba02249c396cb4691a8a9829912b6bfa

    • SHA512

      ff50b89ef6ec490dd063ac2e877372fdb9c9fb84cf8cfea6aa060a51a93da1e95695c467e1b3a1d808f5025bc5442fea4b4e73a3720e689d01f48b1a53a94298

    • SSDEEP

      1536:xK5oMjFX92lax0zsC+fgOKn4IVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhVsWzRM:xKPz2Eyw+n4IVqZ2fQkbn1vVAva63Hem

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks