Overview

overview

10

Static

static

10

416c3e0487...6d.exe

windows7-x64

10

416c3e0487...6d.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    416c3e0487500785e55fd827e53fb86d.exe

  • Size

    113KB

  • Sample

    240106-zl7scsfgck

  • MD5

    416c3e0487500785e55fd827e53fb86d

  • SHA1

    7765ae86f32989698c81257ba7310a839fb7ef5b

  • SHA256

    fb222ecac4c4478fd67edbe574790c1a3d4f8a1d3b510ad9434e9028a600a01f

  • SHA512

    49f65e0343a7caee6c70025906c6ede6018a363456271bb84296726f06a6fe9cb89d58bed02b989f53795c4303e4ffc8dd066cb364c103153bda9389947cf7a2

  • SSDEEP

    1536:CYCaiQqJKRs8lXBQfeiYfueIM1cgCe8uvQGYQzlVZg2lKVTP96YS2bMJVn:jNJKwutMugCe8uvQa7gRj9/S2Kn

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      416c3e0487500785e55fd827e53fb86d.exe

    • Size

      113KB

    • MD5

      416c3e0487500785e55fd827e53fb86d

    • SHA1

      7765ae86f32989698c81257ba7310a839fb7ef5b

    • SHA256

      fb222ecac4c4478fd67edbe574790c1a3d4f8a1d3b510ad9434e9028a600a01f

    • SHA512

      49f65e0343a7caee6c70025906c6ede6018a363456271bb84296726f06a6fe9cb89d58bed02b989f53795c4303e4ffc8dd066cb364c103153bda9389947cf7a2

    • SSDEEP

      1536:CYCaiQqJKRs8lXBQfeiYfueIM1cgCe8uvQGYQzlVZg2lKVTP96YS2bMJVn:jNJKwutMugCe8uvQa7gRj9/S2Kn

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks