Overview

overview

10

Static

static

10

23d9436ec8...AS.exe

windows7-x64

10

23d9436ec8...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    23d9436ec8d2bfc2dacc130f32e11e10_NEAS

  • Size

    768KB

  • Sample

    240507-leldwsac8x

  • MD5

    23d9436ec8d2bfc2dacc130f32e11e10

  • SHA1

    06aeb94dec1e3fb4bdfd3048a8eaabb2b6c4ff01

  • SHA256

    672197cc32303594ba419a2cdfd73cdb0a91306ff8f467c811d15aa0d401fa6d

  • SHA512

    8d89dd98accc3104b5cda9b2b5f7208c9296bc567ec974b328ef2c68209bc5483c38bc9087729132d4f3fdb328d66e57868d1ee701704e74877f44d96c7b6368

  • SSDEEP

    12288:2GeDHo6Md7Guvo6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHP:PC1q5h3q5htaSHFaZRBEYyqmaf2qwiHP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      23d9436ec8d2bfc2dacc130f32e11e10_NEAS

    • Size

      768KB

    • MD5

      23d9436ec8d2bfc2dacc130f32e11e10

    • SHA1

      06aeb94dec1e3fb4bdfd3048a8eaabb2b6c4ff01

    • SHA256

      672197cc32303594ba419a2cdfd73cdb0a91306ff8f467c811d15aa0d401fa6d

    • SHA512

      8d89dd98accc3104b5cda9b2b5f7208c9296bc567ec974b328ef2c68209bc5483c38bc9087729132d4f3fdb328d66e57868d1ee701704e74877f44d96c7b6368

    • SSDEEP

      12288:2GeDHo6Md7Guvo6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHP:PC1q5h3q5htaSHFaZRBEYyqmaf2qwiHP

    Score
    10/10
    backdoordroppertrojanpersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks