Overview

overview

10

Static

static

3

Backdoor.W...ew.exe

windows7-x64

10

Backdoor.W...ew.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Backdoor.Win32.Berbew.pz-cea53575e91bcaeb54bce7a5654833bcfd6ab9c5e1872a48a1f55a13d22e933eN

  • Size

    1.1MB

  • Sample

    240919-srdyxavgrc

  • MD5

    7d801a10ff48ad27b40cbb9d04d9eed0

  • SHA1

    e145d44bfee2d2b95d66bb64291ead1c0d162d1f

  • SHA256

    cea53575e91bcaeb54bce7a5654833bcfd6ab9c5e1872a48a1f55a13d22e933e

  • SHA512

    d5f5fe1ca80201528a630055beeb2db4f9cc1ed314413ca54b654b48ae82d0079b49e2e112e3b8af440d0c41805a33ddc83443b647b4e258da116a06baff7367

  • SSDEEP

    24576:1AYMKnCrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:/MKnIQg5SiLi0kEyDucEQX

Score
10/10
discoverypersistence

Malware Config

Targets

    • Target

      Backdoor.Win32.Berbew.pz-cea53575e91bcaeb54bce7a5654833bcfd6ab9c5e1872a48a1f55a13d22e933eN

    • Size

      1.1MB

    • MD5

      7d801a10ff48ad27b40cbb9d04d9eed0

    • SHA1

      e145d44bfee2d2b95d66bb64291ead1c0d162d1f

    • SHA256

      cea53575e91bcaeb54bce7a5654833bcfd6ab9c5e1872a48a1f55a13d22e933e

    • SHA512

      d5f5fe1ca80201528a630055beeb2db4f9cc1ed314413ca54b654b48ae82d0079b49e2e112e3b8af440d0c41805a33ddc83443b647b4e258da116a06baff7367

    • SSDEEP

      24576:1AYMKnCrQg5Wm0BmmvFimm0MTP7hm0BmmvFimm0HkEyDucEQX:/MKnIQg5SiLi0kEyDucEQX

    Score
    10/10
    discoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks