Overview

overview

10

Static

static

10

c8bae75d6e...AS.exe

windows7-x64

10

c8bae75d6e...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    c8bae75d6e93dea1ff4da0398c634040_NEAS

  • Size

    384KB

  • Sample

    240507-sraw9afc43

  • MD5

    c8bae75d6e93dea1ff4da0398c634040

  • SHA1

    a152fda0d571ac07152864170bc15b59ea44a7c8

  • SHA256

    b296cb44471f824b3feac2440610beb05f2e451970bf1dda4f53ef1e6a83315a

  • SHA512

    3f6326f94ba06a16faff412126693d563a07ae2e235d2894893e9ac8eeaf47c4b60410adade0c575b80de5ca3373b4da3e5255ded280c8654855c9466488d8d3

  • SSDEEP

    6144:/1pHk/0IEnBTAXpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoHN:3Hk/0KpV6yYPMLnfBJKFbhDwBpV6yYPV

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      c8bae75d6e93dea1ff4da0398c634040_NEAS

    • Size

      384KB

    • MD5

      c8bae75d6e93dea1ff4da0398c634040

    • SHA1

      a152fda0d571ac07152864170bc15b59ea44a7c8

    • SHA256

      b296cb44471f824b3feac2440610beb05f2e451970bf1dda4f53ef1e6a83315a

    • SHA512

      3f6326f94ba06a16faff412126693d563a07ae2e235d2894893e9ac8eeaf47c4b60410adade0c575b80de5ca3373b4da3e5255ded280c8654855c9466488d8d3

    • SSDEEP

      6144:/1pHk/0IEnBTAXpui6yYPaIGckjh/xaSfBJKFbhD7sYQpui6yYPaIGck7/DiuoHN:3Hk/0KpV6yYPMLnfBJKFbhDwBpV6yYPV

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks