Overview

overview

10

Static

static

10

d436e6de52...87.exe

windows7-x64

10

d436e6de52...87.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    d436e6de524b760c5a6fedb2c667ac87.exe

  • Size

    768KB

  • Sample

    240111-vfmg1sbgem

  • MD5

    d436e6de524b760c5a6fedb2c667ac87

  • SHA1

    ce94945fefd9e285553ce733e42cfae50d4c3be8

  • SHA256

    b39a44728821cadb26a88303ee99989703138fb7441734bbe13e922ad82403a5

  • SHA512

    a50bf21f834008346ed28a7ec8463b6e6c06b7bbb9c494df17ce4957d40ba9678ef16c3fd52b5b81ef8bd592e8f6f361b6218908cdfb3a0d1835a03a2a1a8359

  • SSDEEP

    12288:vuNp6dXHaINIVyeNIVy2oIvPKiK13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGb:2+dXHfNIVyeNIVy2jU13fS2hEYM9RIPk

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      d436e6de524b760c5a6fedb2c667ac87.exe

    • Size

      768KB

    • MD5

      d436e6de524b760c5a6fedb2c667ac87

    • SHA1

      ce94945fefd9e285553ce733e42cfae50d4c3be8

    • SHA256

      b39a44728821cadb26a88303ee99989703138fb7441734bbe13e922ad82403a5

    • SHA512

      a50bf21f834008346ed28a7ec8463b6e6c06b7bbb9c494df17ce4957d40ba9678ef16c3fd52b5b81ef8bd592e8f6f361b6218908cdfb3a0d1835a03a2a1a8359

    • SSDEEP

      12288:vuNp6dXHaINIVyeNIVy2oIvPKiK13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGb:2+dXHfNIVyeNIVy2jU13fS2hEYM9RIPk

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks