Overview

overview

10

Static

static

10

2601437fbc...10.exe

windows7-x64

10

2601437fbc...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2601437fbc1929673ca0231f9dc3da10.exe

  • Size

    378KB

  • Sample

    240103-tds2caafh7

  • MD5

    2601437fbc1929673ca0231f9dc3da10

  • SHA1

    8320bd96a9db16b8dbc2969610c8fdec969baf76

  • SHA256

    3c1ce38897914b60ae55111e85f7d2c71ae2c012ab3a99ef577d01dd340716a3

  • SHA512

    8d9f4c034bc3390e72a7cc4e10dcb1f6115ed29d3bc51246cd1a593e3563d36f0fe270e77dff42ff576455209a3729af15b81cfeb9ecdb2908a2869bf8a377aa

  • SSDEEP

    6144:MLuEruEt2xEheYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:2LttheYr75lTefkY660fIaDZkY660f28

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2601437fbc1929673ca0231f9dc3da10.exe

    • Size

      378KB

    • MD5

      2601437fbc1929673ca0231f9dc3da10

    • SHA1

      8320bd96a9db16b8dbc2969610c8fdec969baf76

    • SHA256

      3c1ce38897914b60ae55111e85f7d2c71ae2c012ab3a99ef577d01dd340716a3

    • SHA512

      8d9f4c034bc3390e72a7cc4e10dcb1f6115ed29d3bc51246cd1a593e3563d36f0fe270e77dff42ff576455209a3729af15b81cfeb9ecdb2908a2869bf8a377aa

    • SSDEEP

      6144:MLuEruEt2xEheYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:2LttheYr75lTefkY660fIaDZkY660f28

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks