Overview

overview

10

Static

static

10

e607f12af8...AS.exe

windows7-x64

10

e607f12af8...AS.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    e607f12af8d115c2eea7d1701f4dcf80_NEAS

  • Size

    128KB

  • Sample

    240507-vnzsbaaa79

  • MD5

    e607f12af8d115c2eea7d1701f4dcf80

  • SHA1

    ab1261332a421fc05992b1ebcf7a83a74c29a92c

  • SHA256

    1f126779a0bd08b3eaeabe451835048275e328122f635d7af10b2a0036bcf962

  • SHA512

    705c30c81643d478f96f4cd94e5bb00836f86c901085cf845f40d6848721fc98dca6d41a12e629bd30aabbe2b398b09fbe0342632215a7f365c5629146ecc434

  • SSDEEP

    1536:2IguIPdaHvAPEmCOrcBtRkPJfrIA2FD72/Ai8QRQDsRfRa9HprmRfRJCLIXG:C/SSEmWBtROJfKFNi8QeDs5wkpHxG

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      e607f12af8d115c2eea7d1701f4dcf80_NEAS

    • Size

      128KB

    • MD5

      e607f12af8d115c2eea7d1701f4dcf80

    • SHA1

      ab1261332a421fc05992b1ebcf7a83a74c29a92c

    • SHA256

      1f126779a0bd08b3eaeabe451835048275e328122f635d7af10b2a0036bcf962

    • SHA512

      705c30c81643d478f96f4cd94e5bb00836f86c901085cf845f40d6848721fc98dca6d41a12e629bd30aabbe2b398b09fbe0342632215a7f365c5629146ecc434

    • SSDEEP

      1536:2IguIPdaHvAPEmCOrcBtRkPJfrIA2FD72/Ai8QRQDsRfRa9HprmRfRJCLIXG:C/SSEmWBtROJfKFNi8QeDs5wkpHxG

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks