Overview

overview

10

Static

static

10

2809e1a5a8...AS.exe

windows7-x64

10

2809e1a5a8...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2809e1a5a890d467ffd0ae5c1635efd0_NEAS

  • Size

    482KB

  • Sample

    240507-lkczpsaf4v

  • MD5

    2809e1a5a890d467ffd0ae5c1635efd0

  • SHA1

    1ad047380c53ab7326f42a80c73a68719d3d9fd9

  • SHA256

    562c7dd590687ed6d2b05c8467fed69b2a46523a882cbe9ff6a4db3e651df46e

  • SHA512

    7ae2bba8222103a6e134724d04aff6baca193ea08747093f2189e258ec87ede6add0e1aa66c824ed4078c6eb3ecc444e42ea197b2742e7d9687930ba609adc2e

  • SSDEEP

    12288:i8ZzBTngJSLrpV6yYP4rbpV6yYPg058KpV6yYP8OThj:iAhngJSLrW4XWleKW8OThj

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      2809e1a5a890d467ffd0ae5c1635efd0_NEAS

    • Size

      482KB

    • MD5

      2809e1a5a890d467ffd0ae5c1635efd0

    • SHA1

      1ad047380c53ab7326f42a80c73a68719d3d9fd9

    • SHA256

      562c7dd590687ed6d2b05c8467fed69b2a46523a882cbe9ff6a4db3e651df46e

    • SHA512

      7ae2bba8222103a6e134724d04aff6baca193ea08747093f2189e258ec87ede6add0e1aa66c824ed4078c6eb3ecc444e42ea197b2742e7d9687930ba609adc2e

    • SSDEEP

      12288:i8ZzBTngJSLrpV6yYP4rbpV6yYPg058KpV6yYP8OThj:iAhngJSLrW4XWleKW8OThj

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks