Overview

overview

10

Static

static

3

153a753c52...90.exe

windows7-x64

10

153a753c52...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    153a753c52491186d3a1f6543b4e1e6bc098296893c9e49d88f43c9f310cee90

  • Size

    59KB

  • Sample

    241005-xl1ypsvaja

  • MD5

    d57750657a97267af3e1690853ab61ed

  • SHA1

    e1ef5ec920ae6832fb871b99555446d63cac7bc6

  • SHA256

    153a753c52491186d3a1f6543b4e1e6bc098296893c9e49d88f43c9f310cee90

  • SHA512

    726b5bfdb8adce6ffc81ecc9113fcef73c39ee9bfbbd1f515ae3e97eb484588ccdfaa4c84f4ed205c68f49604e879329905dc49648e025b30607b91fa8cf0ebb

  • SSDEEP

    768:6FHkM/8ghNFQoEqEqo1Z9rZQwkBOwRW2lp6KynCQBSZ/1H5u55nf1fZMEBFELvkH:6dxEIXEpr1Z9rZPKOw1lWbBokbNCyVso

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      153a753c52491186d3a1f6543b4e1e6bc098296893c9e49d88f43c9f310cee90

    • Size

      59KB

    • MD5

      d57750657a97267af3e1690853ab61ed

    • SHA1

      e1ef5ec920ae6832fb871b99555446d63cac7bc6

    • SHA256

      153a753c52491186d3a1f6543b4e1e6bc098296893c9e49d88f43c9f310cee90

    • SHA512

      726b5bfdb8adce6ffc81ecc9113fcef73c39ee9bfbbd1f515ae3e97eb484588ccdfaa4c84f4ed205c68f49604e879329905dc49648e025b30607b91fa8cf0ebb

    • SSDEEP

      768:6FHkM/8ghNFQoEqEqo1Z9rZQwkBOwRW2lp6KynCQBSZ/1H5u55nf1fZMEBFELvkH:6dxEIXEpr1Z9rZPKOw1lWbBokbNCyVso

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks