berbew | b0f5bb02511290603b6d1e3899908af0f4ad8b3da0c6cc9ec81134f3ed9c4d3d | Triage

Sharing

General

Target

b0f5bb02511290603b6d1e3899908af0f4ad8b3da0c6cc9ec81134f3ed9c4d3d
Size

144KB
Sample

241123-cylz4asjcp
MD5

f1b2bd1aafbe34b56b62bb7106c3c497
SHA1

820f0c1fcc67b53e91c2c73f7259153ac6a91f81
SHA256

b0f5bb02511290603b6d1e3899908af0f4ad8b3da0c6cc9ec81134f3ed9c4d3d
SHA512

f4f82742797c4faa0b169a50abb4d63ad978d2bfb61117ab156519e2d012b67495cc4ebb3cc75c1e15f5e5dfdd69ff0c520c1b36f342689397d222210320e381
SSDEEP

3072:0VsXM2bwEGhPu2yevg5gHq/Wp+YmKfxgQdxvA:jHgwqg5UmKyIxo

Score

10^/10

berbew backdoor discovery

Malware Config

Targets

- Target
  
  b0f5bb02511290603b6d1e3899908af0f4ad8b3da0c6cc9ec81134f3ed9c4d3d
- Size
  
  144KB
- MD5
  
  f1b2bd1aafbe34b56b62bb7106c3c497
- SHA1
  
  820f0c1fcc67b53e91c2c73f7259153ac6a91f81
- SHA256
  
  b0f5bb02511290603b6d1e3899908af0f4ad8b3da0c6cc9ec81134f3ed9c4d3d
- SHA512
  
  f4f82742797c4faa0b169a50abb4d63ad978d2bfb61117ab156519e2d012b67495cc4ebb3cc75c1e15f5e5dfdd69ff0c520c1b36f342689397d222210320e381
- SSDEEP
  
  3072:0VsXM2bwEGhPu2yevg5gHq/Wp+YmKfxgQdxvA:jHgwqg5UmKyIxo
Score

10^/10

berbew backdoor discovery
- Berbew
  Berbew is a backdoor written in C++.
  backdoor berbew
- Berbew family
  berbew
- Drops file in System32 directory
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

berbewbackdoordiscovery

behavioral2

berbewbackdoordiscovery