Overview

overview

10

Static

static

10

4493e42367...0c.exe

windows7-x64

10

4493e42367...0c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4493e4236784036c82f40e48381f40ac9e1776a6b20fce3287aa0a6c318ed60c.exe

  • Size

    768KB

  • Sample

    240522-1pzftsac46

  • MD5

    0c2e59d1c59a17186b256f5987815300

  • SHA1

    f2b873c76d823496f028256bb701e7ea2bd716b1

  • SHA256

    4493e4236784036c82f40e48381f40ac9e1776a6b20fce3287aa0a6c318ed60c

  • SHA512

    8c22f25a0ada16826d9935ef7abf19c69625cdfd7d2393dd4a07c6e64521ddaa86d6c09ab9d9f358a3fb4255a743c4759bd41c262fd3193f7113c7ece8f59346

  • SSDEEP

    12288:srq0HVRvL6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRCW:UDhq5h3q5htaSHFaZRBEYyqmaf2qwiHP

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      4493e4236784036c82f40e48381f40ac9e1776a6b20fce3287aa0a6c318ed60c.exe

    • Size

      768KB

    • MD5

      0c2e59d1c59a17186b256f5987815300

    • SHA1

      f2b873c76d823496f028256bb701e7ea2bd716b1

    • SHA256

      4493e4236784036c82f40e48381f40ac9e1776a6b20fce3287aa0a6c318ed60c

    • SHA512

      8c22f25a0ada16826d9935ef7abf19c69625cdfd7d2393dd4a07c6e64521ddaa86d6c09ab9d9f358a3fb4255a743c4759bd41c262fd3193f7113c7ece8f59346

    • SSDEEP

      12288:srq0HVRvL6IveDVqvQ6IvYvc6IveDVqvQ6IvBaSHaMaZRBEYyqmaf2qwiHPKgRCW:UDhq5h3q5htaSHFaZRBEYyqmaf2qwiHP

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks