Overview

overview

10

Static

static

3

b8bd0b10d6...86.exe

windows7-x64

10

b8bd0b10d6...86.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    b8bd0b10d654d9f4fc9be969ed911cd4b12a52556903c3b8da00bee8f3627286

  • Size

    90KB

  • Sample

    241123-dcvwjssnel

  • MD5

    3f85944898400d1ed35e1fb78af124db

  • SHA1

    e8ed84156bfdf029ab2a9af1606e13841af647b9

  • SHA256

    b8bd0b10d654d9f4fc9be969ed911cd4b12a52556903c3b8da00bee8f3627286

  • SHA512

    1424d270c66ae0699aa9d8bd2de3e968fd71c944261f1684857aa79e772b2493c0b07846f5fd7d88ec9a8dd19243857c97f65b5068d3cb2492278c18779a6739

  • SSDEEP

    1536:/MDBnr7P0FJ1P1kb9/O3SEhvQ8B3HOo8dGeu/Ub0VkVNK:6nfe15ZJXZAGeu/Ub0+NK

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://f/wcmd.htm

http://f/ppslog.php

http://f/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      b8bd0b10d654d9f4fc9be969ed911cd4b12a52556903c3b8da00bee8f3627286

    • Size

      90KB

    • MD5

      3f85944898400d1ed35e1fb78af124db

    • SHA1

      e8ed84156bfdf029ab2a9af1606e13841af647b9

    • SHA256

      b8bd0b10d654d9f4fc9be969ed911cd4b12a52556903c3b8da00bee8f3627286

    • SHA512

      1424d270c66ae0699aa9d8bd2de3e968fd71c944261f1684857aa79e772b2493c0b07846f5fd7d88ec9a8dd19243857c97f65b5068d3cb2492278c18779a6739

    • SSDEEP

      1536:/MDBnr7P0FJ1P1kb9/O3SEhvQ8B3HOo8dGeu/Ub0VkVNK:6nfe15ZJXZAGeu/Ub0+NK

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks