Overview

overview

10

Static

static

10

31184d8ed9...04.exe

windows7-x64

10

31184d8ed9...04.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    31184d8ed942388a3eb30d53ad83bb934a1f9afa41fea3b191488b0206a53504.exe

  • Size

    115KB

  • Sample

    240522-whze2aba99

  • MD5

    1559511d0261c5e9bdf85fe3c2f81cb0

  • SHA1

    19ebe92f5a288ac5e0eba1b5409a445373ad553d

  • SHA256

    31184d8ed942388a3eb30d53ad83bb934a1f9afa41fea3b191488b0206a53504

  • SHA512

    109cf5970dd7ce861560332d42053e8539c1b002e9754121ffa7fb6c2367027382bd5b981b279935e0ecb831c25150a83e300672afe312375df4b01fa1032623

  • SSDEEP

    3072:u4+5IxV/+inzEdbrIR/SoQUP5u30KqTKr4:uN52minzEhrIooQUPoDqTKE

Score
10/10
berbewbackdoordropperpersistencetrojan

Malware Config

Targets

    • Target

      31184d8ed942388a3eb30d53ad83bb934a1f9afa41fea3b191488b0206a53504.exe

    • Size

      115KB

    • MD5

      1559511d0261c5e9bdf85fe3c2f81cb0

    • SHA1

      19ebe92f5a288ac5e0eba1b5409a445373ad553d

    • SHA256

      31184d8ed942388a3eb30d53ad83bb934a1f9afa41fea3b191488b0206a53504

    • SHA512

      109cf5970dd7ce861560332d42053e8539c1b002e9754121ffa7fb6c2367027382bd5b981b279935e0ecb831c25150a83e300672afe312375df4b01fa1032623

    • SSDEEP

      3072:u4+5IxV/+inzEdbrIR/SoQUP5u30KqTKr4:uN52minzEhrIooQUPoDqTKE

    Score
    10/10
    backdoordropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

      backdoortrojandropper

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks