Overview

overview

10

Static

static

3

c4f1ec6701...26.exe

windows7-x64

10

c4f1ec6701...26.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c4f1ec670147550f039bf39e398df61f3ee42160aeeb30b14a4b883b1390b126

  • Size

    59KB

  • Sample

    250306-mxbsvawxcz

  • MD5

    3b4f10b3355585579f14da1e690a04c3

  • SHA1

    d940bff368f0a7595dbde2b34100a9016a8554ed

  • SHA256

    c4f1ec670147550f039bf39e398df61f3ee42160aeeb30b14a4b883b1390b126

  • SHA512

    d5ce6efefc1aebafc781edb805be2c34d3b47de77e2b89be3b7b371bf1c24d7566bca7f965754ca4411260c6d9d29008b06a70cbc8b19b61441ec2c1e5621b17

  • SSDEEP

    768:5K30zdrmEOnsLKwE/GDaX1G3jnqQrHdiWxHZ/1H5mY5nf1fZMEBFELvkVgFR:eEO0KXEaX1G3jnFdVzsMNCyVs

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      c4f1ec670147550f039bf39e398df61f3ee42160aeeb30b14a4b883b1390b126

    • Size

      59KB

    • MD5

      3b4f10b3355585579f14da1e690a04c3

    • SHA1

      d940bff368f0a7595dbde2b34100a9016a8554ed

    • SHA256

      c4f1ec670147550f039bf39e398df61f3ee42160aeeb30b14a4b883b1390b126

    • SHA512

      d5ce6efefc1aebafc781edb805be2c34d3b47de77e2b89be3b7b371bf1c24d7566bca7f965754ca4411260c6d9d29008b06a70cbc8b19b61441ec2c1e5621b17

    • SSDEEP

      768:5K30zdrmEOnsLKwE/GDaX1G3jnqQrHdiWxHZ/1H5mY5nf1fZMEBFELvkVgFR:eEO0KXEaX1G3jnFdVzsMNCyVs

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks