Overview

overview

10

Static

static

10

022e6b19ca...fc.exe

windows7-x64

10

022e6b19ca...fc.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    022e6b19ca261c4bfa1f1c5a5c4974fc.exe

  • Size

    1.2MB

  • Sample

    240504-v1k5pacd61

  • MD5

    022e6b19ca261c4bfa1f1c5a5c4974fc

  • SHA1

    e8cfa171f831345652e24c7c1ad3b3cf967f0b69

  • SHA256

    6b34067b98936dc636474a01b1d1f9fecfc41cedd6433ace42398f35574a5bfe

  • SHA512

    16cf683723e81ca9b45f07480b4ecfb8721a0d1aa3be15308fe47ef1b8a1d4142f74e2a5a8946830ff547fd7608c0e6ec705b41ae9fb64f957e0b4418d86236e

  • SSDEEP

    12288:Ah4Osf0FHCXwpnsKvNA+XTvZHWuEo3oWbvrec:d0ZpsKv2EvZHp3oWbvrec

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      022e6b19ca261c4bfa1f1c5a5c4974fc.exe

    • Size

      1.2MB

    • MD5

      022e6b19ca261c4bfa1f1c5a5c4974fc

    • SHA1

      e8cfa171f831345652e24c7c1ad3b3cf967f0b69

    • SHA256

      6b34067b98936dc636474a01b1d1f9fecfc41cedd6433ace42398f35574a5bfe

    • SHA512

      16cf683723e81ca9b45f07480b4ecfb8721a0d1aa3be15308fe47ef1b8a1d4142f74e2a5a8946830ff547fd7608c0e6ec705b41ae9fb64f957e0b4418d86236e

    • SSDEEP

      12288:Ah4Osf0FHCXwpnsKvNA+XTvZHWuEo3oWbvrec:d0ZpsKv2EvZHp3oWbvrec

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks