berbew | 78c9ba651a59e549d579042341f942273ebbef1942e3b00cebcbda43389a6e89[.]exe

General

Target

78c9ba651a59e549d579042341f942273ebbef1942e3b00cebcbda43389a6e89.exe
Size

440KB
MD5

0e30696faf2af47c270f0ea2e75f3960
SHA1

2cdab8659ccd4679da2efb27df740ac3b33b87dc
SHA256

78c9ba651a59e549d579042341f942273ebbef1942e3b00cebcbda43389a6e89
SHA512

e5f203d4b47016b71afaa4cb115985cbf5cd77cd4b0c15fe51038738109b509970e6a554f79731578b4c7a8ab857d60e4a8109bb33a7d027276b51999513f304
SSDEEP

12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHt:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMX

Score

10^/10

Berbew family
berbew
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
backdoor trojan dropper

Processes:

resource yara_rule

sample family_berbew
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_berbew

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
78c9ba651a59e549d579042341f942273ebbef1942e3b00cebcbda43389a6e89.exe