berbew | b2c334cb46e35d1e2689171940949508886267384337006c089e5870b44130a4

General

Target

d8f9c855b8df1c9893ed2404c0e39910_NEIKI
Size

226KB
Sample

240509-dk447afa8w
MD5

d8f9c855b8df1c9893ed2404c0e39910
SHA1

aadb5647c911fa07664d6f0025a01e57c708eea9
SHA256

b2c334cb46e35d1e2689171940949508886267384337006c089e5870b44130a4
SHA512

86864fb7338f52d1b0a8cdbb30bf8fa5746957f5db5f066913f1c8b5ca2f787448ea0e0e67f14d34837783bd297fed754039a437c40a193ce305de4e6fa43d53
SSDEEP

6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtt:jvw68XS8+d8HamysaZHRD44M3ZzF/Gen

Score

10^/10

Malware Config

Targets

- Target
  
  d8f9c855b8df1c9893ed2404c0e39910_NEIKI
- Size
  
  226KB
- MD5
  
  d8f9c855b8df1c9893ed2404c0e39910
- SHA1
  
  aadb5647c911fa07664d6f0025a01e57c708eea9
- SHA256
  
  b2c334cb46e35d1e2689171940949508886267384337006c089e5870b44130a4
- SHA512
  
  86864fb7338f52d1b0a8cdbb30bf8fa5746957f5db5f066913f1c8b5ca2f787448ea0e0e67f14d34837783bd297fed754039a437c40a193ce305de4e6fa43d53
- SSDEEP
  
  6144:jvNzUzbF68H3S8+b6uyptXIi9u/mp8saZHRD4v4M84Z9YkF/GeHNHyORQdcIKtt:jvw68XS8+d8HamysaZHRD44M3ZzF/Gen
Score

10^/10

backdoor dropper evasion trojan upx
- Malware Dropper & Backdoor - Berbew
  Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
  backdoor trojan dropper
- Modifies visibility of file extensions in Explorer
  evasion
- Executes dropped EXE
- Loads dropped DLL
- UPX packed file
  Detects executables packed with UPX/modified UPX open source packer.
  upx
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

1

T1564

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

System Information Discovery

1

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Malware Dropper & Backdoor - Berbew

Modifies visibility of file extensions in Explorer

Executes dropped EXE

Loads dropped DLL

UPX packed file

Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2