General

  • Target

    NEAS.dc2eaad8483dc924eab88c331495ceb0_JC.exe

  • Size

    107KB

  • Sample

    231101-3xpygagb85

  • MD5

    dc2eaad8483dc924eab88c331495ceb0

  • SHA1

    67a28fadd86e654dc5ffdf1e3416860bb5251dd6

  • SHA256

    b36b419dd831d7b61586596a155a8314401b2dc1d2845bc61e77069a003ae143

  • SHA512

    591b7169f43cd7ef1d860c5d99ea557f0213306aa1104c2fe8529ca0f405068b397f644fdcc9e2432b955f349914ab537721c3c6f8aaa497bbf10320252f351f

  • SSDEEP

    1536:87pcgjHSNn4ofIBS28lla2LGaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:87O1tJ1GaMU7uihJ5233y

Malware Config

Targets

    • Target

      NEAS.dc2eaad8483dc924eab88c331495ceb0_JC.exe

    • Size

      107KB

    • MD5

      dc2eaad8483dc924eab88c331495ceb0

    • SHA1

      67a28fadd86e654dc5ffdf1e3416860bb5251dd6

    • SHA256

      b36b419dd831d7b61586596a155a8314401b2dc1d2845bc61e77069a003ae143

    • SHA512

      591b7169f43cd7ef1d860c5d99ea557f0213306aa1104c2fe8529ca0f405068b397f644fdcc9e2432b955f349914ab537721c3c6f8aaa497bbf10320252f351f

    • SSDEEP

      1536:87pcgjHSNn4ofIBS28lla2LGaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:87O1tJ1GaMU7uihJ5233y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks