Overview

overview

10

Static

static

10

a08e1623ab...39.exe

windows7-x64

10

a08e1623ab...39.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    a08e1623ab5e54bb359f6efa64079539.exe

  • Size

    386KB

  • Sample

    240102-skelvsagh7

  • MD5

    a08e1623ab5e54bb359f6efa64079539

  • SHA1

    c0b4fb80a01991d70adab059d41e019902db217f

  • SHA256

    94938db1cc65610924800cfcca7733103df68cb1a5ca4cbd28417531e318770b

  • SHA512

    9f807b29787650dedef3e1e8b1c8926d848b9029835774de9860757b285f8a97e18f932375ead3af1efdbc76cb29807204f834ff00a58011bf375a91100ab152

  • SSDEEP

    12288:GY8rCZYE6YYBHpd0uD319ZvSntnhp352SCdL:GY8rCyE6YYBHpd0uD319ZvSntnhp3525

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      a08e1623ab5e54bb359f6efa64079539.exe

    • Size

      386KB

    • MD5

      a08e1623ab5e54bb359f6efa64079539

    • SHA1

      c0b4fb80a01991d70adab059d41e019902db217f

    • SHA256

      94938db1cc65610924800cfcca7733103df68cb1a5ca4cbd28417531e318770b

    • SHA512

      9f807b29787650dedef3e1e8b1c8926d848b9029835774de9860757b285f8a97e18f932375ead3af1efdbc76cb29807204f834ff00a58011bf375a91100ab152

    • SSDEEP

      12288:GY8rCZYE6YYBHpd0uD319ZvSntnhp352SCdL:GY8rCyE6YYBHpd0uD319ZvSntnhp3525

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks