Overview

overview

10

Static

static

10

10fff31160...AS.exe

windows7-x64

10

10fff31160...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    10fff31160e75b5301d74cfb0abbfd30_NEAS

  • Size

    320KB

  • Sample

    240507-kmzqtabg57

  • MD5

    10fff31160e75b5301d74cfb0abbfd30

  • SHA1

    d3fb92224409868710e988aea3d991df1cc18a16

  • SHA256

    0bc74ead1d0b53fe97e39735303c9ee272d2a0e160967213ba0c9134eb0fc1a8

  • SHA512

    47e0890f69ad1c541bda4b8ac61325eb21a757db849cc31097da881ba22d2a0b02b8d2f486192d76cca6128b2f7812b0ac01f4fc2f600b88be41d217fb6111c0

  • SSDEEP

    6144:aE4l7STArCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSqHB8oF8KdBT:UFHRFbe5qfF8KfT

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      10fff31160e75b5301d74cfb0abbfd30_NEAS

    • Size

      320KB

    • MD5

      10fff31160e75b5301d74cfb0abbfd30

    • SHA1

      d3fb92224409868710e988aea3d991df1cc18a16

    • SHA256

      0bc74ead1d0b53fe97e39735303c9ee272d2a0e160967213ba0c9134eb0fc1a8

    • SHA512

      47e0890f69ad1c541bda4b8ac61325eb21a757db849cc31097da881ba22d2a0b02b8d2f486192d76cca6128b2f7812b0ac01f4fc2f600b88be41d217fb6111c0

    • SSDEEP

      6144:aE4l7STArCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSqHB8oF8KdBT:UFHRFbe5qfF8KfT

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks