Overview

overview

10

Static

static

3

cde546467c...aN.exe

windows7-x64

10

cde546467c...aN.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    cde546467cc81980d9a5853b9e334532aeae756632f88285d7d1f9b3f21810baN.exe

  • Size

    59KB

  • Sample

    240925-vqp1wszfqa

  • MD5

    367835c979cd162a9e6e20a389516170

  • SHA1

    fe6e91c60915718219793f7c9ba1cc52a9673f4e

  • SHA256

    cde546467cc81980d9a5853b9e334532aeae756632f88285d7d1f9b3f21810ba

  • SHA512

    a92b3998c540f1535495b70bfc6a3fbca1423e19747ce3ddfa4beea19c585cc78fd2fdaf209fc25cc2a6cd6fed2bb62501f5dddaeffb858b9a626024277ff04e

  • SSDEEP

    1536:XPRGnRstbpOSfbREH/BKwchVyhFNCyVso:XPR2jSfbREZd+sheeso

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      cde546467cc81980d9a5853b9e334532aeae756632f88285d7d1f9b3f21810baN.exe

    • Size

      59KB

    • MD5

      367835c979cd162a9e6e20a389516170

    • SHA1

      fe6e91c60915718219793f7c9ba1cc52a9673f4e

    • SHA256

      cde546467cc81980d9a5853b9e334532aeae756632f88285d7d1f9b3f21810ba

    • SHA512

      a92b3998c540f1535495b70bfc6a3fbca1423e19747ce3ddfa4beea19c585cc78fd2fdaf209fc25cc2a6cd6fed2bb62501f5dddaeffb858b9a626024277ff04e

    • SSDEEP

      1536:XPRGnRstbpOSfbREH/BKwchVyhFNCyVso:XPR2jSfbREZd+sheeso

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks