Overview

overview

10

Static

static

10

3b4dbe659c...fd.exe

windows7-x64

10

3b4dbe659c...fd.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3b4dbe659c459830e54215d8fdf96cfd.exe

  • Size

    130KB

  • Sample

    231127-vvs84sag24

  • MD5

    3b4dbe659c459830e54215d8fdf96cfd

  • SHA1

    bf3e5c15e5627b19e93c4e7f0b233978ea1f435c

  • SHA256

    b6b72b1ea16e3eca72751f36db4130bec25254c9afd84ae9c28444aeafee0575

  • SHA512

    ea7a29495496687ae756dcee84b76ea114ff3fb1c6be0128e8273fa2d8f9aad5fdf7f17b1b485e917961c3653834cf1efd78d59913a90909d2ef4677aa8cffd3

  • SSDEEP

    3072:BlCaExB9X8voGY2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:9ExHXooP4BhHmNEcYj9nhV8NCV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      3b4dbe659c459830e54215d8fdf96cfd.exe

    • Size

      130KB

    • MD5

      3b4dbe659c459830e54215d8fdf96cfd

    • SHA1

      bf3e5c15e5627b19e93c4e7f0b233978ea1f435c

    • SHA256

      b6b72b1ea16e3eca72751f36db4130bec25254c9afd84ae9c28444aeafee0575

    • SHA512

      ea7a29495496687ae756dcee84b76ea114ff3fb1c6be0128e8273fa2d8f9aad5fdf7f17b1b485e917961c3653834cf1efd78d59913a90909d2ef4677aa8cffd3

    • SSDEEP

      3072:BlCaExB9X8voGY2/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:9ExHXooP4BhHmNEcYj9nhV8NCV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks