Overview

overview

10

Static

static

3

7eb5442b6b...fN.exe

windows7-x64

10

7eb5442b6b...fN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    7eb5442b6bed68a709e708a2442f6ed486a2c436356571815ffd9a2b82cedcefN

  • Size

    59KB

  • Sample

    240928-qyta3a1ekh

  • MD5

    d5d9672b533bf13224c038d0683c2c30

  • SHA1

    c8925a981337ee01099fc4de02a88086261eec59

  • SHA256

    7eb5442b6bed68a709e708a2442f6ed486a2c436356571815ffd9a2b82cedcef

  • SHA512

    37cdccb9af75dec4b5799482ac8c0be5fc07d42d95e342295fcf48474f59651a6c8223e454dff46623551c977496dfbb9bff7d678faea3674821ec93116e3a39

  • SSDEEP

    768:qdYcW7Ryff+rJSrhee1KIK1GAv/TdQyrH26jJF36+erhXTZ/1H5q/5nf1fZMEBFQ:oYc2wH+gYIK1b/7uJfQxNCyVs

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      7eb5442b6bed68a709e708a2442f6ed486a2c436356571815ffd9a2b82cedcefN

    • Size

      59KB

    • MD5

      d5d9672b533bf13224c038d0683c2c30

    • SHA1

      c8925a981337ee01099fc4de02a88086261eec59

    • SHA256

      7eb5442b6bed68a709e708a2442f6ed486a2c436356571815ffd9a2b82cedcef

    • SHA512

      37cdccb9af75dec4b5799482ac8c0be5fc07d42d95e342295fcf48474f59651a6c8223e454dff46623551c977496dfbb9bff7d678faea3674821ec93116e3a39

    • SSDEEP

      768:qdYcW7Ryff+rJSrhee1KIK1GAv/TdQyrH26jJF36+erhXTZ/1H5q/5nf1fZMEBFQ:oYc2wH+gYIK1b/7uJfQxNCyVs

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks