Overview

overview

10

Static

static

10

41c80c5655...AS.exe

windows7-x64

10

41c80c5655...AS.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    41c80c56557f2af7a4ab0901e247e327_NEAS

  • Size

    108KB

  • Sample

    240508-tvalbsdb5y

  • MD5

    41c80c56557f2af7a4ab0901e247e327

  • SHA1

    c5811ed73c8facbd3cc3f051ea72ded5c1da6b49

  • SHA256

    2b7ecaf8bb1506fb4b96303529c5417f30debf66fd9b92a36d43555728f1af97

  • SHA512

    3622795c2257500de1b676348df439ab96342827fc91be33fe3b29116a00bf69b08db704221c55d6197b781a7aa866197896718cb8a1a4d1834cc0bd38b6c169

  • SSDEEP

    1536:YtM8TDVaoUu3YdXmmNsWISfQ+cMwB+rjm8NiIqhn3HQ8BawTj2wQ3K:J8TD96BVjfQ+eUjmOiBn3w8BdTj2h3K

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      41c80c56557f2af7a4ab0901e247e327_NEAS

    • Size

      108KB

    • MD5

      41c80c56557f2af7a4ab0901e247e327

    • SHA1

      c5811ed73c8facbd3cc3f051ea72ded5c1da6b49

    • SHA256

      2b7ecaf8bb1506fb4b96303529c5417f30debf66fd9b92a36d43555728f1af97

    • SHA512

      3622795c2257500de1b676348df439ab96342827fc91be33fe3b29116a00bf69b08db704221c55d6197b781a7aa866197896718cb8a1a4d1834cc0bd38b6c169

    • SSDEEP

      1536:YtM8TDVaoUu3YdXmmNsWISfQ+cMwB+rjm8NiIqhn3HQ8BawTj2wQ3K:J8TD96BVjfQ+eUjmOiBn3w8BdTj2h3K

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks