General

  • Target

    NEAS.7536377d301e0c9c9a90ded8e3b82570.exe

  • Size

    833KB

  • Sample

    231106-z33vqsgg64

  • MD5

    7536377d301e0c9c9a90ded8e3b82570

  • SHA1

    8dc127ee54d9c27909c6b2afef2aa6e89e22961a

  • SHA256

    53325eea093bcb25a5970248d74f15339a0dbc7831320d8d408d2488edd1d3d3

  • SHA512

    35d705a298e2fcd7272210ef1c241e9d16b3e62c6597406388a67406b732464397babd2a6e4de3bf55979273e0206099d0ae3a98aef0c633e731decac08f084f

  • SSDEEP

    24576:500dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:fdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

Malware Config

Targets

    • Target

      NEAS.7536377d301e0c9c9a90ded8e3b82570.exe

    • Size

      833KB

    • MD5

      7536377d301e0c9c9a90ded8e3b82570

    • SHA1

      8dc127ee54d9c27909c6b2afef2aa6e89e22961a

    • SHA256

      53325eea093bcb25a5970248d74f15339a0dbc7831320d8d408d2488edd1d3d3

    • SHA512

      35d705a298e2fcd7272210ef1c241e9d16b3e62c6597406388a67406b732464397babd2a6e4de3bf55979273e0206099d0ae3a98aef0c633e731decac08f084f

    • SSDEEP

      24576:500dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:fdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks