Overview

overview

10

Static

static

10

cb13bc8e40...72.exe

windows7-x64

10

cb13bc8e40...72.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cb13bc8e4018692ffc339f1fcf586572.exe

  • Size

    416KB

  • Sample

    240110-wsbrqadfc7

  • MD5

    cb13bc8e4018692ffc339f1fcf586572

  • SHA1

    ef28258726f98ce459365dca927830a0bfb53db7

  • SHA256

    5242d65951252921d61f98f2279b192f58058e013aca691cb1735c9d805a30d2

  • SHA512

    97b231c7dd12034bf61c7deefdcc488ea2fe6fe2445f5a741d6aa1a30dc6a4ed7493f50419bee3ed17540813fffd1b2bf119d9adc803f5221b1e1878ebf87664

  • SSDEEP

    12288:vAAs3iAYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:lsyAYJ07kE0KoFtw2gu9RxrBIUbPLwHh

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      cb13bc8e4018692ffc339f1fcf586572.exe

    • Size

      416KB

    • MD5

      cb13bc8e4018692ffc339f1fcf586572

    • SHA1

      ef28258726f98ce459365dca927830a0bfb53db7

    • SHA256

      5242d65951252921d61f98f2279b192f58058e013aca691cb1735c9d805a30d2

    • SHA512

      97b231c7dd12034bf61c7deefdcc488ea2fe6fe2445f5a741d6aa1a30dc6a4ed7493f50419bee3ed17540813fffd1b2bf119d9adc803f5221b1e1878ebf87664

    • SSDEEP

      12288:vAAs3iAYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:lsyAYJ07kE0KoFtw2gu9RxrBIUbPLwHh

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks