Overview

overview

10

Static

static

10

56a7c7147a...7N.exe

windows7-x64

10

56a7c7147a...7N.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    56a7c7147a6c92d531276f81c29a6dcd3f872743fe06f68bd842754b672c2857N.exe

  • Size

    464KB

  • Sample

    241208-df8ltatqgq

  • MD5

    45cfa5d40c66a7aba843f13399cb6ee0

  • SHA1

    aa1dabf8b9329772e09c7b3bb540ef068846236e

  • SHA256

    56a7c7147a6c92d531276f81c29a6dcd3f872743fe06f68bd842754b672c2857

  • SHA512

    17169368f668b8c5c1ab3fa3d95d75fa2d0600bd982e4aa1e82aeb523ba4a2828a6da1f0c99081dd9555bdcb161493455020aeed3e01ec1eda124327d3ec7fdf

  • SSDEEP

    6144:EdH285CAxEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC4:E5nCMEVI2C4EVu2JEVcBEVI2C4

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Extracted

Family

berbew

C2

http://viruslist.com/wcmd.txt

http://viruslist.com/ppslog.php

http://viruslist.com/piplog.php?%s:%i:%i:%s:%09u:%i:%02d:%02d:%02d

Targets

    • Target

      56a7c7147a6c92d531276f81c29a6dcd3f872743fe06f68bd842754b672c2857N.exe

    • Size

      464KB

    • MD5

      45cfa5d40c66a7aba843f13399cb6ee0

    • SHA1

      aa1dabf8b9329772e09c7b3bb540ef068846236e

    • SHA256

      56a7c7147a6c92d531276f81c29a6dcd3f872743fe06f68bd842754b672c2857

    • SHA512

      17169368f668b8c5c1ab3fa3d95d75fa2d0600bd982e4aa1e82aeb523ba4a2828a6da1f0c99081dd9555bdcb161493455020aeed3e01ec1eda124327d3ec7fdf

    • SSDEEP

      6144:EdH285CAxEOIIIPCn4EOIuIPJEOOcHTETKEOIIIPC4:E5nCMEVI2C4EVu2JEVcBEVI2C4

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks