Overview

overview

10

Static

static

10

0002d88e7c...90.exe

windows7-x64

10

0002d88e7c...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0002d88e7c5ff615251f05feb1751790.bin

  • Size

    1000KB

  • Sample

    240503-r8smyshf2w

  • MD5

    0002d88e7c5ff615251f05feb1751790

  • SHA1

    d708b56d49752b42d65d7b03ac4e9d1ee0b8c08e

  • SHA256

    2031e16414445e1a6791a78f2cc1a09a09632c382dc8560c6841506d4b3471fc

  • SHA512

    7bccd088fd6795089ddfa73b6f655c5cee2a0eada687a6259633db83a9633c1091672dde34959f299b3c9c2e2bafa9178569731a8284df747bbfd9c5ff154102

  • SSDEEP

    6144:RKJ6FcT3JBxDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTYUCII5:RmrtHBFLPj3TmLnWrOxNuxC97hFq9o7

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      0002d88e7c5ff615251f05feb1751790.bin

    • Size

      1000KB

    • MD5

      0002d88e7c5ff615251f05feb1751790

    • SHA1

      d708b56d49752b42d65d7b03ac4e9d1ee0b8c08e

    • SHA256

      2031e16414445e1a6791a78f2cc1a09a09632c382dc8560c6841506d4b3471fc

    • SHA512

      7bccd088fd6795089ddfa73b6f655c5cee2a0eada687a6259633db83a9633c1091672dde34959f299b3c9c2e2bafa9178569731a8284df747bbfd9c5ff154102

    • SSDEEP

      6144:RKJ6FcT3JBxDHBFLqWjjgwTgZLnSnLrTSxJ2JrYXklSu9lIhBBJKQh31GTYUCII5:RmrtHBFLPj3TmLnWrOxNuxC97hFq9o7

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks