General

  • Target

    NEAS.329d0f2a32d517202e057837c29fb985.exe

  • Size

    833KB

  • Sample

    231028-wfzm1scf5t

  • MD5

    329d0f2a32d517202e057837c29fb985

  • SHA1

    d261090474873be0d399e8106f2520234d71a0b9

  • SHA256

    8cee53304df8147e71818e1fed77e440bc7586833e7369624f06c499531e810b

  • SHA512

    a37b5d413858b2a196d863ca8f9bd47bc966fa3c1cb3e8e26cf05a4896507ec7043e5d45f8e638e5e6d9d893fbc301f19aed274dd1dfb31938216da740e82f97

  • SSDEEP

    24576:nSRdXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:cdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

Malware Config

Targets

    • Target

      NEAS.329d0f2a32d517202e057837c29fb985.exe

    • Size

      833KB

    • MD5

      329d0f2a32d517202e057837c29fb985

    • SHA1

      d261090474873be0d399e8106f2520234d71a0b9

    • SHA256

      8cee53304df8147e71818e1fed77e440bc7586833e7369624f06c499531e810b

    • SHA512

      a37b5d413858b2a196d863ca8f9bd47bc966fa3c1cb3e8e26cf05a4896507ec7043e5d45f8e638e5e6d9d893fbc301f19aed274dd1dfb31938216da740e82f97

    • SSDEEP

      24576:nSRdXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:cdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks