Overview

overview

10

Static

static

10

notifier.exe

windows7-x64

10

notifier.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    notifier.exe

  • Size

    13.1MB

  • Sample

    241011-17qawaxbjb

  • MD5

    348141b3b6706f353edd9c5e71a10fbe

  • SHA1

    25970e5a60e2fcd7c02a1b163ed89897cfa44549

  • SHA256

    08c6594c4add4fce5d5b203684efee10cbfeea469e0508e58fbb57b464dcd9e7

  • SHA512

    e86cfed3b032c1a1c4d4376dd0b510ec33d1f300e1e733b691882e58539109715d76e28b91112f46335bb2199a6efdd998ab0f8f0105cd4319f85b2bd160046e

  • SSDEEP

    393216:iGV21SQhZ2YsHFUK2Jn1+TtIiFQS2NXNsIX3WabTToj:dFQZ2YwUlJn1QtIm28Inpzo

Score
10/10
berbewdoomrat antivm apt backdoor banker bootkit botnet clipper collection crypter discovery downloader dropper evasion exploit exploiter upxadwarebackdoorpyinstallerupx

Malware Config

Extracted

Family

berbew

C2

http://tat-neftbank.ru/kkq.php

http://tat-neftbank.ru/wcmd.htm

Targets

    • Target

      notifier.exe

    • Size

      13.1MB

    • MD5

      348141b3b6706f353edd9c5e71a10fbe

    • SHA1

      25970e5a60e2fcd7c02a1b163ed89897cfa44549

    • SHA256

      08c6594c4add4fce5d5b203684efee10cbfeea469e0508e58fbb57b464dcd9e7

    • SHA512

      e86cfed3b032c1a1c4d4376dd0b510ec33d1f300e1e733b691882e58539109715d76e28b91112f46335bb2199a6efdd998ab0f8f0105cd4319f85b2bd160046e

    • SSDEEP

      393216:iGV21SQhZ2YsHFUK2Jn1+TtIiFQS2NXNsIX3WabTToj:dFQZ2YwUlJn1QtIm28Inpzo

    Score
    10/10
    berbewbackdoorupx

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Cats the Freakster

      my daddy freakster was mentioned in this file 🥵

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks