Overview

overview

10

Static

static

3

98311a491b...3N.exe

windows7-x64

10

98311a491b...3N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    98311a491b2072faff6f91ecbec96eaa5b44c6a18e3289811c57c245132f6d83N.exe

  • Size

    59KB

  • Sample

    241120-e7r9kswkep

  • MD5

    eb4e8b830defa9264dae75c0f731dc30

  • SHA1

    96a7d53740264b2f7dfb29117dbf481dbedcc996

  • SHA256

    98311a491b2072faff6f91ecbec96eaa5b44c6a18e3289811c57c245132f6d83

  • SHA512

    d3c4c1dbbd353af866ac9e44c43d51d17a83abdfd15a799341b92bd4dfa4533debfc183d89b7cc206896ef7faee3b8bf37aacab4c4dcf9929766010348c1a035

  • SSDEEP

    1536:hguReQF1zg6w3qCUazb/RUFwHIHohNCyVso:hTRd/w3qC9/ayoHneso

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      98311a491b2072faff6f91ecbec96eaa5b44c6a18e3289811c57c245132f6d83N.exe

    • Size

      59KB

    • MD5

      eb4e8b830defa9264dae75c0f731dc30

    • SHA1

      96a7d53740264b2f7dfb29117dbf481dbedcc996

    • SHA256

      98311a491b2072faff6f91ecbec96eaa5b44c6a18e3289811c57c245132f6d83

    • SHA512

      d3c4c1dbbd353af866ac9e44c43d51d17a83abdfd15a799341b92bd4dfa4533debfc183d89b7cc206896ef7faee3b8bf37aacab4c4dcf9929766010348c1a035

    • SSDEEP

      1536:hguReQF1zg6w3qCUazb/RUFwHIHohNCyVso:hTRd/w3qC9/ayoHneso

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks