Overview

overview

10

Static

static

10

0ce2af3d5a...AS.exe

windows7-x64

10

0ce2af3d5a...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    0ce2af3d5adaa95d0430381afa28fd60_NEAS

  • Size

    386KB

  • Sample

    240507-kgczvsbe52

  • MD5

    0ce2af3d5adaa95d0430381afa28fd60

  • SHA1

    c0e44e6838f9315d3d2e457003224b9fa7fd9a8b

  • SHA256

    d4a7e3461b2a868cd306816c217a9af080fab889bd8fe1517f0609dca865a472

  • SHA512

    01a69d0afd0100fc705e904aea76f6ab087a4341ac4a92018115858070d41f610743cd85537c870f61a93f0c328dab8b1816bcc29100c7c53ecc275fa1de7c39

  • SSDEEP

    12288:NMJljUrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:iErCyE6YYBHpd0uD319ZvSntnhp352So

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      0ce2af3d5adaa95d0430381afa28fd60_NEAS

    • Size

      386KB

    • MD5

      0ce2af3d5adaa95d0430381afa28fd60

    • SHA1

      c0e44e6838f9315d3d2e457003224b9fa7fd9a8b

    • SHA256

      d4a7e3461b2a868cd306816c217a9af080fab889bd8fe1517f0609dca865a472

    • SHA512

      01a69d0afd0100fc705e904aea76f6ab087a4341ac4a92018115858070d41f610743cd85537c870f61a93f0c328dab8b1816bcc29100c7c53ecc275fa1de7c39

    • SSDEEP

      12288:NMJljUrCZYE6YYBHpd0uD319ZvSntnhp352SCdL:iErCyE6YYBHpd0uD319ZvSntnhp352So

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks