Overview

overview

10

Static

static

3

d9efd5a6e2...63.exe

windows7-x64

10

d9efd5a6e2...63.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d9efd5a6e257b2eaf4032aa04b349888a1b32e48a91f327129780eea1ba58363

  • Size

    59KB

  • Sample

    250306-pqzx7syqy4

  • MD5

    3551f0f63d8bd5c4ec943c57dde7f228

  • SHA1

    4330330e10df1b957a5ca2869987ac8fce2d6ee7

  • SHA256

    d9efd5a6e257b2eaf4032aa04b349888a1b32e48a91f327129780eea1ba58363

  • SHA512

    f42e90404b18f19e64ce6e46978fafb98131635e91818ffba8c8a61885f3803e69896f7d3dd0cd946f9b4e4cdd3350ef9497189a9f45af2aeb3f8611afdefb31

  • SSDEEP

    1536:3g5cwiS0IZw2SMNGXGjtSnWw9XyS2jw79NCyVs:3APYIZxNJjtSRF2kSes

Score
10/10
berbewbackdoordiscoverypersistence

Malware Config

Targets

    • Target

      d9efd5a6e257b2eaf4032aa04b349888a1b32e48a91f327129780eea1ba58363

    • Size

      59KB

    • MD5

      3551f0f63d8bd5c4ec943c57dde7f228

    • SHA1

      4330330e10df1b957a5ca2869987ac8fce2d6ee7

    • SHA256

      d9efd5a6e257b2eaf4032aa04b349888a1b32e48a91f327129780eea1ba58363

    • SHA512

      f42e90404b18f19e64ce6e46978fafb98131635e91818ffba8c8a61885f3803e69896f7d3dd0cd946f9b4e4cdd3350ef9497189a9f45af2aeb3f8611afdefb31

    • SSDEEP

      1536:3g5cwiS0IZw2SMNGXGjtSnWw9XyS2jw79NCyVs:3APYIZxNJjtSRF2kSes

    Score
    10/10
    berbewbackdoordiscoverypersistence

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Berbew

      Berbew is a backdoor written in C++.

      backdoorberbew

    • Berbew family

      berbew

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks