Overview

overview

10

Static

static

10

b2ef92c0f8...d1.exe

windows7-x64

10

b2ef92c0f8...d1.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b2ef92c0f8888751b5c483623b75e2d1.exe

  • Size

    386KB

  • Sample

    240101-y2a8nahdgl

  • MD5

    b2ef92c0f8888751b5c483623b75e2d1

  • SHA1

    fa4b6eae405f7fae76a30f60904ba78d19097c81

  • SHA256

    8e0dcb9c935b3f041e05938277161f5e99465eca260c46716e9232e6716aef41

  • SHA512

    80f022eb3baa2073c2480090f89b59db256f03e4c6688c3a8683b02977e0a463c1fb1f112f1e96198f495c133709a3f51bbb1fa6ec918129fa8e338383ad3212

  • SSDEEP

    12288:paSOrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:USOrCyE6YYBHpd0uD319ZvSntnhp3525

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b2ef92c0f8888751b5c483623b75e2d1.exe

    • Size

      386KB

    • MD5

      b2ef92c0f8888751b5c483623b75e2d1

    • SHA1

      fa4b6eae405f7fae76a30f60904ba78d19097c81

    • SHA256

      8e0dcb9c935b3f041e05938277161f5e99465eca260c46716e9232e6716aef41

    • SHA512

      80f022eb3baa2073c2480090f89b59db256f03e4c6688c3a8683b02977e0a463c1fb1f112f1e96198f495c133709a3f51bbb1fa6ec918129fa8e338383ad3212

    • SSDEEP

      12288:paSOrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:USOrCyE6YYBHpd0uD319ZvSntnhp3525

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks