Overview

overview

10

Static

static

3

d238b87321...7f.exe

windows7-x64

10

d238b87321...7f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d238b87321eb3b0fd4236341538448482b375040789bab8a9cc8eca87f2d7d7f

  • Size

    59KB

  • Sample

    241224-b8r4esykav

  • MD5

    5981beac5a4569713cdfeac477273e26

  • SHA1

    02b6131c38b2655a1081374b0fb665344acb71db

  • SHA256

    d238b87321eb3b0fd4236341538448482b375040789bab8a9cc8eca87f2d7d7f

  • SHA512

    97ce689800eb18cbb1a44efbc97eef0dfc0a2243b6a56b5e8d976c60b26efd400fd9ca014b3bb33383379ec9e7dd4830022b601cd3d85097234a9630ad731519

  • SSDEEP

    768:TK5zhjVt/QXha4ttL0staxDyYk4t4c/39DBLdZtwuRiklKZ/1H5Oi5nf1fZMEBFN:I9jVSXEdoCyFc/rLdZu2gkeNCyVso

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      d238b87321eb3b0fd4236341538448482b375040789bab8a9cc8eca87f2d7d7f

    • Size

      59KB

    • MD5

      5981beac5a4569713cdfeac477273e26

    • SHA1

      02b6131c38b2655a1081374b0fb665344acb71db

    • SHA256

      d238b87321eb3b0fd4236341538448482b375040789bab8a9cc8eca87f2d7d7f

    • SHA512

      97ce689800eb18cbb1a44efbc97eef0dfc0a2243b6a56b5e8d976c60b26efd400fd9ca014b3bb33383379ec9e7dd4830022b601cd3d85097234a9630ad731519

    • SSDEEP

      768:TK5zhjVt/QXha4ttL0staxDyYk4t4c/39DBLdZtwuRiklKZ/1H5Oi5nf1fZMEBFN:I9jVSXEdoCyFc/rLdZu2gkeNCyVso

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks