berbew | 32e4aaa8afe3d607a87bb3ebfccb79a64df788b14de7082c989d2ca908f60717[.]exe

General

Target

32e4aaa8afe3d607a87bb3ebfccb79a64df788b14de7082c989d2ca908f60717.exe
Size

441KB
MD5

15a3a1e3d0537ff0a2fa18e54f2c2640
SHA1

2a9f6b339a9820e2d8067160419ad5157b7f1dce
SHA256

32e4aaa8afe3d607a87bb3ebfccb79a64df788b14de7082c989d2ca908f60717
SHA512

c3bb391d66015a4ce997df167c9403497bb162063adf68f61d074b1f50b7d3e8343872224a04d46038d3dd70db99c07b2c5b2d445493e750bf2316c021403257
SSDEEP

12288:w4wFHoS9KxbNnidEhjEJd1kNpeUgI95yRoZHVaoJMOxFXnRV4PiGO0hUmHZ:kKxbNndhjEJd1kNpeUgI95yRoZHgoJMj

Score

10^/10

Berbew family
berbew
Malware Dropper & Backdoor - Berbew 1 IoCs
Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.
backdoor trojan dropper

Processes:

resource yara_rule

sample family_berbew
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	family_berbew

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
32e4aaa8afe3d607a87bb3ebfccb79a64df788b14de7082c989d2ca908f60717.exe