Overview

overview

10

Static

static

10

d845a734e0...c5.exe

windows7-x64

10

d845a734e0...c5.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d845a734e0e55ccf0d7f27a457d2d4c5.exe

  • Size

    378KB

  • Sample

    240106-y9kgasfbdk

  • MD5

    d845a734e0e55ccf0d7f27a457d2d4c5

  • SHA1

    323330eb12042be3d12020aa2aab270df3daf6d3

  • SHA256

    4de4df4730a1187f76c48a4dfd0ab49fa3a4e6b8b9846b7a027a6db96b0872fd

  • SHA512

    17332fb5c1eff0d14bdf9823158eb24e8f2b763cda7396f06e7a7e46521b4fffe9d51e13e738c8773f1d306a13e446f8a151fb8a36faf0a2feda220ed5ef8fec

  • SSDEEP

    6144:yBSWm32aWsFzdAiEAeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UKL:2m3RWw5ArAeYr75lTefkY660fIaDZkYA

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d845a734e0e55ccf0d7f27a457d2d4c5.exe

    • Size

      378KB

    • MD5

      d845a734e0e55ccf0d7f27a457d2d4c5

    • SHA1

      323330eb12042be3d12020aa2aab270df3daf6d3

    • SHA256

      4de4df4730a1187f76c48a4dfd0ab49fa3a4e6b8b9846b7a027a6db96b0872fd

    • SHA512

      17332fb5c1eff0d14bdf9823158eb24e8f2b763cda7396f06e7a7e46521b4fffe9d51e13e738c8773f1d306a13e446f8a151fb8a36faf0a2feda220ed5ef8fec

    • SSDEEP

      6144:yBSWm32aWsFzdAiEAeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UKL:2m3RWw5ArAeYr75lTefkY660fIaDZkYA

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks