Overview

overview

10

Static

static

10

f22ed8abc1...9c.exe

windows7-x64

10

f22ed8abc1...9c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f22ed8abc1496dc0ec0ea4aa76dab29c.exe

  • Size

    304KB

  • Sample

    240103-s87mjsaeh5

  • MD5

    f22ed8abc1496dc0ec0ea4aa76dab29c

  • SHA1

    90160eb2b35299b9d3c9402718c457c108a44320

  • SHA256

    af1ff0ebb0f38761937a8dd4c15726f08d9710734edcc13278995e3c0f8c015b

  • SHA512

    a72a7954215c88815d6c64dc0320bd947b6c46c0fba1d902df5af5a8cad816210183ecadbdb5630efc14239fdbe704d6f7a4ebf9a15f8a9f98ba6ed6298f73d5

  • SSDEEP

    3072:5LC4v3LcWMZeDe5wkpHxGkIs6COoU60EaBNNVBZr6y2WU+XfiR:55bcZsVCAkOCOu0EajNVBZr6y2WXQ

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      f22ed8abc1496dc0ec0ea4aa76dab29c.exe

    • Size

      304KB

    • MD5

      f22ed8abc1496dc0ec0ea4aa76dab29c

    • SHA1

      90160eb2b35299b9d3c9402718c457c108a44320

    • SHA256

      af1ff0ebb0f38761937a8dd4c15726f08d9710734edcc13278995e3c0f8c015b

    • SHA512

      a72a7954215c88815d6c64dc0320bd947b6c46c0fba1d902df5af5a8cad816210183ecadbdb5630efc14239fdbe704d6f7a4ebf9a15f8a9f98ba6ed6298f73d5

    • SSDEEP

      3072:5LC4v3LcWMZeDe5wkpHxGkIs6COoU60EaBNNVBZr6y2WU+XfiR:55bcZsVCAkOCOu0EajNVBZr6y2WXQ

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks