Overview

overview

10

Static

static

3

ac15dd8fa3...aN.exe

windows7-x64

10

ac15dd8fa3...aN.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ac15dd8fa3ad39621c1578a2de1ec99c186aa70c5dffc82b23847781b72f2cfaN

  • Size

    59KB

  • Sample

    241010-h4zq2a1cjf

  • MD5

    46e36680056e97dda936fc83eadaae70

  • SHA1

    5fd28b49d12a92f6bcc2cdc5d94ce23ff8bb56bf

  • SHA256

    ac15dd8fa3ad39621c1578a2de1ec99c186aa70c5dffc82b23847781b72f2cfa

  • SHA512

    b037268f79ad63a54a349f84760cd67eb9e66b5165fc578765cf1daf5073c829b7df90c8e921de272beed8e12f93bb62b45dbb5b48044d1ab01c28d5711436d1

  • SSDEEP

    768:hf8mmLrOvj7kSDdOHucs4r1Su5qn5JZ/1H5295nf1fZMEBFELvkVgFR:F8vLrOvjwSD0Hucs4RShj83NCyVs

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      ac15dd8fa3ad39621c1578a2de1ec99c186aa70c5dffc82b23847781b72f2cfaN

    • Size

      59KB

    • MD5

      46e36680056e97dda936fc83eadaae70

    • SHA1

      5fd28b49d12a92f6bcc2cdc5d94ce23ff8bb56bf

    • SHA256

      ac15dd8fa3ad39621c1578a2de1ec99c186aa70c5dffc82b23847781b72f2cfa

    • SHA512

      b037268f79ad63a54a349f84760cd67eb9e66b5165fc578765cf1daf5073c829b7df90c8e921de272beed8e12f93bb62b45dbb5b48044d1ab01c28d5711436d1

    • SSDEEP

      768:hf8mmLrOvj7kSDdOHucs4r1Su5qn5JZ/1H5295nf1fZMEBFELvkVgFR:F8vLrOvjwSD0Hucs4RShj83NCyVs

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks