Behavioral task
behavioral1
Sample
c307389c5d8f693493559fe403148841.exe
Resource
win7-20231215-en
General
-
Target
c307389c5d8f693493559fe403148841.exe
-
Size
396KB
-
MD5
c307389c5d8f693493559fe403148841
-
SHA1
e0a9cf4025dbb9bcb84409b5439c933fe42321ca
-
SHA256
5020b20ad92a114ffad63721f0e46ce21830a50243879e1be40558968d081674
-
SHA512
f62ec92db33d808960577623185b67ee3955fdea443e0abd20ff9542975dc76a867bb031a9905e785472bb3515c34e963bd3a886f29dfb99a410eeac7924c069
-
SSDEEP
12288:jVNna+5kl0a04OL5a6MuJpE0Lny19c09IkjrVIqbh/Uh9:jVLi0a04OL5a6MuJpE0Lny19c09Ikjrc
Malware Config
Signatures
-
Berbew family
-
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
resource yara_rule sample family_berbew -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c307389c5d8f693493559fe403148841.exe
Files
-
c307389c5d8f693493559fe403148841.exe.exe windows:6 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 144KB - Virtual size: 60KB
Size: 228KB - Virtual size: 4B
���� Size: - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA
Size: - Virtual size:
Size: 163KB - Virtual size:
IMAGE_SCN_CNT_INITIALIZED_DATA