Overview

overview

10

Static

static

10

40ea8f4feb...AS.exe

windows7-x64

10

40ea8f4feb...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    40ea8f4feb86e3ba6925f7e3eb957700_NEAS

  • Size

    844KB

  • Sample

    240507-baxw1sbb7v

  • MD5

    40ea8f4feb86e3ba6925f7e3eb957700

  • SHA1

    87d3ccca74b9025d3c99e3e27ce5137ff3a3b45b

  • SHA256

    f9f0312c805f38bbe6ddff6fd4948afd9a2c6a32509a04f3b98cb98c75ba40cc

  • SHA512

    b71c1910a94b2b89921f82eea28cffd0deddea76a1fc56efb2b7c46d86cb1080c3ea5ef0a01c82fc2142f4e9659f44cc7611067dc58127f8ab49cb5e7d4ea01a

  • SSDEEP

    24576:DZH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:DZH5W3TbQihw+cdX2x46uhqllMi

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      40ea8f4feb86e3ba6925f7e3eb957700_NEAS

    • Size

      844KB

    • MD5

      40ea8f4feb86e3ba6925f7e3eb957700

    • SHA1

      87d3ccca74b9025d3c99e3e27ce5137ff3a3b45b

    • SHA256

      f9f0312c805f38bbe6ddff6fd4948afd9a2c6a32509a04f3b98cb98c75ba40cc

    • SHA512

      b71c1910a94b2b89921f82eea28cffd0deddea76a1fc56efb2b7c46d86cb1080c3ea5ef0a01c82fc2142f4e9659f44cc7611067dc58127f8ab49cb5e7d4ea01a

    • SSDEEP

      24576:DZH5W3TnbQihMpQnqrdX72LbY6x46uR/qYglMi:DZH5W3TbQihw+cdX2x46uhqllMi

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks