Overview

overview

10

Static

static

10

6b0367ca75...be.exe

windows7-x64

10

6b0367ca75...be.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    6b0367ca75330a9be34d3b5f7451fdbe.exe

  • Size

    270KB

  • Sample

    231231-qwd4csfgc6

  • MD5

    6b0367ca75330a9be34d3b5f7451fdbe

  • SHA1

    5460e18039771fea5662c41f0d0b35f2e1fe659d

  • SHA256

    cffc5a997129f1ca27fb93ef94892069f5dc6e5114049ee045bc676aeff7a553

  • SHA512

    85e13d7adc7b98b67074e47575a5034eccb9d89be84c694239aa8b3b4da1674173b4d0a3a58ccb21e7d970fcad153d92c12c047fa2b7090162757e56538d52e8

  • SSDEEP

    6144:90wqqW6hRNjpck4MetpS+f2uXLO+AGb+oPri2O3py69mNoRqzO5MnNYx:fM6hb2XtpD2ub7A2Vri730697qy5oNK

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      6b0367ca75330a9be34d3b5f7451fdbe.exe

    • Size

      270KB

    • MD5

      6b0367ca75330a9be34d3b5f7451fdbe

    • SHA1

      5460e18039771fea5662c41f0d0b35f2e1fe659d

    • SHA256

      cffc5a997129f1ca27fb93ef94892069f5dc6e5114049ee045bc676aeff7a553

    • SHA512

      85e13d7adc7b98b67074e47575a5034eccb9d89be84c694239aa8b3b4da1674173b4d0a3a58ccb21e7d970fcad153d92c12c047fa2b7090162757e56538d52e8

    • SSDEEP

      6144:90wqqW6hRNjpck4MetpS+f2uXLO+AGb+oPri2O3py69mNoRqzO5MnNYx:fM6hb2XtpD2ub7A2Vri730697qy5oNK

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks