Overview

overview

10

Static

static

10

a23d2c86ed...4e.exe

windows7-x64

10

a23d2c86ed...4e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    a23d2c86edb3912e314f9722555e294e.exe

  • Size

    391KB

  • Sample

    231231-qzrtmaggg7

  • MD5

    a23d2c86edb3912e314f9722555e294e

  • SHA1

    07a59f3a2d5743a777452eddf5a1b48352317ee6

  • SHA256

    2d3616d7b813d2b95a17d256839aed531cd194ca7cdd5ba29b6bec65c5e7b40f

  • SHA512

    db2e0c240c71feefda134dec5f4b48d0ae457a815ab0fc37d544d137c1ad4cce4d5f7200fa3dde0c36d023b3fbf28d5cf052c03da919976ddd8e1140784deeb6

  • SSDEEP

    12288:ow550dUM7T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:ow1Mf9XvEhdfJkKSkU3kHyuaRB5t6k0F

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      a23d2c86edb3912e314f9722555e294e.exe

    • Size

      391KB

    • MD5

      a23d2c86edb3912e314f9722555e294e

    • SHA1

      07a59f3a2d5743a777452eddf5a1b48352317ee6

    • SHA256

      2d3616d7b813d2b95a17d256839aed531cd194ca7cdd5ba29b6bec65c5e7b40f

    • SHA512

      db2e0c240c71feefda134dec5f4b48d0ae457a815ab0fc37d544d137c1ad4cce4d5f7200fa3dde0c36d023b3fbf28d5cf052c03da919976ddd8e1140784deeb6

    • SSDEEP

      12288:ow550dUM7T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:ow1Mf9XvEhdfJkKSkU3kHyuaRB5t6k0F

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks