Overview

overview

10

Static

static

10

b50b5c9e47...45.exe

windows7-x64

10

b50b5c9e47...45.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b50b5c9e47e1fd089f4f5f1dfbf81d45.exe

  • Size

    487KB

  • Sample

    240103-tmlnmaahf5

  • MD5

    b50b5c9e47e1fd089f4f5f1dfbf81d45

  • SHA1

    8c8c5bea1236ff13ce26d18f552dd0ea2d824424

  • SHA256

    31536a01f01552b2ae4360eda5c7ae8a86e089fe5ec737932f69b97e7782d4ab

  • SHA512

    7d6cf5bf7c8cfc7f7ecfe2850173483be3ee28fd23c4cae2080777848033001e5d9c52f9145cc761c0d59ed7c9fed94dd92965cc8bbc655a6b9cb9bddbb7b5f7

  • SSDEEP

    12288:m6TpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:m6TWHWZ0PVdvcY9+8hk5DtJNBcL/C10m

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      b50b5c9e47e1fd089f4f5f1dfbf81d45.exe

    • Size

      487KB

    • MD5

      b50b5c9e47e1fd089f4f5f1dfbf81d45

    • SHA1

      8c8c5bea1236ff13ce26d18f552dd0ea2d824424

    • SHA256

      31536a01f01552b2ae4360eda5c7ae8a86e089fe5ec737932f69b97e7782d4ab

    • SHA512

      7d6cf5bf7c8cfc7f7ecfe2850173483be3ee28fd23c4cae2080777848033001e5d9c52f9145cc761c0d59ed7c9fed94dd92965cc8bbc655a6b9cb9bddbb7b5f7

    • SSDEEP

      12288:m6TpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:m6TWHWZ0PVdvcY9+8hk5DtJNBcL/C10m

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks