Overview

overview

10

Static

static

10

d186d2c624...43.exe

windows7-x64

10

d186d2c624...43.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d186d2c6243b0cea65492a1175309343.exe

  • Size

    448KB

  • Sample

    240108-y9ek2sabcp

  • MD5

    d186d2c6243b0cea65492a1175309343

  • SHA1

    d6c8ce0e14124379f4f4307c5af55768d0902538

  • SHA256

    1e37f211f7d21ce5ac716ded82a9fdfb8f03aabc9f6f89040434e1541b07e182

  • SHA512

    b677a503ea7e1277c00d2e3d89b051ab67138ac5d071d0066bf78b2ddc10f21efaa77853742481a6560654b2177fdbd4f55c1641f65fd2121b54e5ad637e9420

  • SSDEEP

    6144:sSOUqH3Hq4e57aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:xOjH3H47aOlxzr3cOK3TajRfXFMKNxC

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d186d2c6243b0cea65492a1175309343.exe

    • Size

      448KB

    • MD5

      d186d2c6243b0cea65492a1175309343

    • SHA1

      d6c8ce0e14124379f4f4307c5af55768d0902538

    • SHA256

      1e37f211f7d21ce5ac716ded82a9fdfb8f03aabc9f6f89040434e1541b07e182

    • SHA512

      b677a503ea7e1277c00d2e3d89b051ab67138ac5d071d0066bf78b2ddc10f21efaa77853742481a6560654b2177fdbd4f55c1641f65fd2121b54e5ad637e9420

    • SSDEEP

      6144:sSOUqH3Hq4e57aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOEjXP3HBsR4/0ePGSzxC:xOjH3H47aOlxzr3cOK3TajRfXFMKNxC

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks