Overview

overview

10

Static

static

10

ad6c7d627e...07.exe

windows7-x64

10

ad6c7d627e...07.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    ad6c7d627e18bc07762dacc67e713707.exe

  • Size

    153KB

  • Sample

    240106-zx4vvagcfm

  • MD5

    ad6c7d627e18bc07762dacc67e713707

  • SHA1

    64beb3111d29f436d0c8457d179ca53cf7c64664

  • SHA256

    ea68dea1aa7801175071fc364bc7db62296225336245a9e4bf807762dd48563a

  • SHA512

    9ab0be8352fb46a39beb8e58a2604c3de127b69d79f1b23125a88e245fee0435e8e575a7f16cd7cb7f749e500817d386ba8efba7ebe2a62f3bc89dde76165375

  • SSDEEP

    3072:4abcQqTVk4UAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:NbcQqTVkjAHj05xP3DZyN1eRppzcexn

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      ad6c7d627e18bc07762dacc67e713707.exe

    • Size

      153KB

    • MD5

      ad6c7d627e18bc07762dacc67e713707

    • SHA1

      64beb3111d29f436d0c8457d179ca53cf7c64664

    • SHA256

      ea68dea1aa7801175071fc364bc7db62296225336245a9e4bf807762dd48563a

    • SHA512

      9ab0be8352fb46a39beb8e58a2604c3de127b69d79f1b23125a88e245fee0435e8e575a7f16cd7cb7f749e500817d386ba8efba7ebe2a62f3bc89dde76165375

    • SSDEEP

      3072:4abcQqTVk4UAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:NbcQqTVkjAHj05xP3DZyN1eRppzcexn

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks