Overview

overview

10

Static

static

10

cfc7e8db14...84.exe

windows7-x64

10

cfc7e8db14...84.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cfc7e8db1491966f628785bb3d4e5484.exe

  • Size

    276KB

  • Sample

    240108-yy1zxahbam

  • MD5

    cfc7e8db1491966f628785bb3d4e5484

  • SHA1

    248e2a89068899cbfb031f19e8ff294e4c7cac3d

  • SHA256

    d2e24079402cf89768ca7ed01b4d21e641d25793c80cbf8e4ef3cab659f4982a

  • SHA512

    1902ffbacfee603ce08bfd2b3106973f38adcc816530e61cc69a9b554881c31165d357a31d50addc292a8754fb63ef8e13903bec4e2a95afb41c5b7f881a7581

  • SSDEEP

    6144:A0T2x0UtTTa2dWZHEFJ7aWN1rtMsQBOSGaF+:AVtTH2HEGWN1RMs1S7

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      cfc7e8db1491966f628785bb3d4e5484.exe

    • Size

      276KB

    • MD5

      cfc7e8db1491966f628785bb3d4e5484

    • SHA1

      248e2a89068899cbfb031f19e8ff294e4c7cac3d

    • SHA256

      d2e24079402cf89768ca7ed01b4d21e641d25793c80cbf8e4ef3cab659f4982a

    • SHA512

      1902ffbacfee603ce08bfd2b3106973f38adcc816530e61cc69a9b554881c31165d357a31d50addc292a8754fb63ef8e13903bec4e2a95afb41c5b7f881a7581

    • SSDEEP

      6144:A0T2x0UtTTa2dWZHEFJ7aWN1rtMsQBOSGaF+:AVtTH2HEGWN1RMs1S7

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks