Overview

overview

10

Static

static

10

e8b23c73d2...ee.exe

windows7-x64

10

e8b23c73d2...ee.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    e8b23c73d2d4d10c3569a1908bd3d6ee.exe

  • Size

    768KB

  • Sample

    231230-xjwwzadhc3

  • MD5

    e8b23c73d2d4d10c3569a1908bd3d6ee

  • SHA1

    472f098753871b9fc2aeb6eab03464c42fb05f28

  • SHA256

    5599060d96595cfb1594791967cc672daba24b457601f545eaf74fdaa11310b7

  • SHA512

    81e67efbbe531fb5032df02df99d4d2f777c205884a0db50381579aa60078b06a8034fc525b9f7f901ee2153bdb9d0c077b1c18f2d636709c78d8f0ac816b36d

  • SSDEEP

    12288:ZoOvQ6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGJ:Zotq5h3q5htaSHFaZRBEYyqmaf2qwiHP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e8b23c73d2d4d10c3569a1908bd3d6ee.exe

    • Size

      768KB

    • MD5

      e8b23c73d2d4d10c3569a1908bd3d6ee

    • SHA1

      472f098753871b9fc2aeb6eab03464c42fb05f28

    • SHA256

      5599060d96595cfb1594791967cc672daba24b457601f545eaf74fdaa11310b7

    • SHA512

      81e67efbbe531fb5032df02df99d4d2f777c205884a0db50381579aa60078b06a8034fc525b9f7f901ee2153bdb9d0c077b1c18f2d636709c78d8f0ac816b36d

    • SSDEEP

      12288:ZoOvQ6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRC4gvGJ:Zotq5h3q5htaSHFaZRBEYyqmaf2qwiHP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks