General

  • Target

    NEAS.c1ff2639497e82f6f0c250ccafad9f30.exe

  • Size

    345KB

  • Sample

    231111-pjb8kafa3v

  • MD5

    c1ff2639497e82f6f0c250ccafad9f30

  • SHA1

    d688efd0cf1fb07be5163dd4b13fc5e8ec3ae7c4

  • SHA256

    35677917b89c72b435426018d2cb52d52f56959ba5df36a778404562f6ca3f16

  • SHA512

    96d051a547613dae88b9ea987b347dc58038e5fb85aa05f6d8845b7a1df8e4e5a6549d4af5ea55f3cf1dc95f76137ec20ff6374f89c200334ef372ce1db1f283

  • SSDEEP

    6144:65T3ubrIGXT2pMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6G:65jubrIGXTI1uznghoaHACwBkka8eGp7

Malware Config

Targets

    • Target

      NEAS.c1ff2639497e82f6f0c250ccafad9f30.exe

    • Size

      345KB

    • MD5

      c1ff2639497e82f6f0c250ccafad9f30

    • SHA1

      d688efd0cf1fb07be5163dd4b13fc5e8ec3ae7c4

    • SHA256

      35677917b89c72b435426018d2cb52d52f56959ba5df36a778404562f6ca3f16

    • SHA512

      96d051a547613dae88b9ea987b347dc58038e5fb85aa05f6d8845b7a1df8e4e5a6549d4af5ea55f3cf1dc95f76137ec20ff6374f89c200334ef372ce1db1f283

    • SSDEEP

      6144:65T3ubrIGXT2pMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6G:65jubrIGXTI1uznghoaHACwBkka8eGp7

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks