Overview

overview

10

Static

static

3

ebd76551b0...9b.exe

windows7-x64

10

ebd76551b0...9b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ebd76551b0ad597daa9e8ddf3189fe3856e7c068412d50afac75afe4bf811c9b

  • Size

    60KB

  • Sample

    241018-ey8vzaxaph

  • MD5

    287f57eaae0a955254cf9cd0abf4bb14

  • SHA1

    70eeb8f0f8e79ee35758adb7c24a9cd521468292

  • SHA256

    ebd76551b0ad597daa9e8ddf3189fe3856e7c068412d50afac75afe4bf811c9b

  • SHA512

    d328b1b43579f9e47e4092e41827ca1ecf51e9e8682f776d2b456e56d5bafce41a67b54add13bd72321864cabbbc05cfcc990845c9d2a2dc6540c057f45ebf30

  • SSDEEP

    768:DoGOt6TKn3HXuKLUQfXEtPYI9hrw4VfgbkIbNwSDqc8/1H5WB+XdnhMl/Xdnhp:Ddc6KNYtQI9m4ao+j+AB86l1r

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      ebd76551b0ad597daa9e8ddf3189fe3856e7c068412d50afac75afe4bf811c9b

    • Size

      60KB

    • MD5

      287f57eaae0a955254cf9cd0abf4bb14

    • SHA1

      70eeb8f0f8e79ee35758adb7c24a9cd521468292

    • SHA256

      ebd76551b0ad597daa9e8ddf3189fe3856e7c068412d50afac75afe4bf811c9b

    • SHA512

      d328b1b43579f9e47e4092e41827ca1ecf51e9e8682f776d2b456e56d5bafce41a67b54add13bd72321864cabbbc05cfcc990845c9d2a2dc6540c057f45ebf30

    • SSDEEP

      768:DoGOt6TKn3HXuKLUQfXEtPYI9hrw4VfgbkIbNwSDqc8/1H5WB+XdnhMl/Xdnhp:Ddc6KNYtQI9m4ao+j+AB86l1r

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks