General

  • Target

    NEAS.dc02ade4c664be8ed501af7be9d02ec0.exe

  • Size

    89KB

  • Sample

    231021-1ewxysad4s

  • MD5

    dc02ade4c664be8ed501af7be9d02ec0

  • SHA1

    178df1f9ce2174dcbc765f6c4a6e0f5e2f0d95cc

  • SHA256

    b646cda60f42adf5dedc045fca5642625379cee4aa1e3993faa8c158e1736c9d

  • SHA512

    501d1834a0db45fa1e5259bbb01689ad689ceef6e11301f7d3c6e6b93b0ec3eb99adbb790716a971f4cc60eca26b957b5b77cf9765921be487186886de1dcf4c

  • SSDEEP

    1536:+pFgC70wNyIdz+ADGJVbOdv9LXf24w/MP7cmalExkg8Fk:qFgONk7bSp/7cmalakgwk

Malware Config

Targets

    • Target

      NEAS.dc02ade4c664be8ed501af7be9d02ec0.exe

    • Size

      89KB

    • MD5

      dc02ade4c664be8ed501af7be9d02ec0

    • SHA1

      178df1f9ce2174dcbc765f6c4a6e0f5e2f0d95cc

    • SHA256

      b646cda60f42adf5dedc045fca5642625379cee4aa1e3993faa8c158e1736c9d

    • SHA512

      501d1834a0db45fa1e5259bbb01689ad689ceef6e11301f7d3c6e6b93b0ec3eb99adbb790716a971f4cc60eca26b957b5b77cf9765921be487186886de1dcf4c

    • SSDEEP

      1536:+pFgC70wNyIdz+ADGJVbOdv9LXf24w/MP7cmalExkg8Fk:qFgONk7bSp/7cmalakgwk

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks