Overview

overview

10

Static

static

10

12e2b75c83...1f.exe

windows7-x64

10

12e2b75c83...1f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    12e2b75c83d8b702694be1ddcd38131f.exe

  • Size

    176KB

  • Sample

    240102-r9m4vsadg2

  • MD5

    12e2b75c83d8b702694be1ddcd38131f

  • SHA1

    37301297dd865ec2a342132084a5d1756b301ca1

  • SHA256

    0bf19302e00ac8aff0c63cf485870c4225362d2ff7bf87b13099b83f8b5f0cd0

  • SHA512

    f6d5275d26a33843bfd9f8edf95096d4d398a9776433c3a66072eb81afde1fc8ee4ae50a1dce84185804250fae0b7cb0a30ba423cbcbef55794fb78aa0746f2b

  • SSDEEP

    3072:9MN8C79ot2z2wUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:9U8C79a9jVu3w8BdTj2V3ppQ60MMCf0F

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      12e2b75c83d8b702694be1ddcd38131f.exe

    • Size

      176KB

    • MD5

      12e2b75c83d8b702694be1ddcd38131f

    • SHA1

      37301297dd865ec2a342132084a5d1756b301ca1

    • SHA256

      0bf19302e00ac8aff0c63cf485870c4225362d2ff7bf87b13099b83f8b5f0cd0

    • SHA512

      f6d5275d26a33843bfd9f8edf95096d4d398a9776433c3a66072eb81afde1fc8ee4ae50a1dce84185804250fae0b7cb0a30ba423cbcbef55794fb78aa0746f2b

    • SSDEEP

      3072:9MN8C79ot2z2wUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:9U8C79a9jVu3w8BdTj2V3ppQ60MMCf0F

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks