General

  • Target

    NEAS.093bca362d8cbb52d667f4655a8a3730.exe

  • Size

    122KB

  • Sample

    231113-c3hhgagc39

  • MD5

    093bca362d8cbb52d667f4655a8a3730

  • SHA1

    4800e1e071c8ee189c70434c86aae44883e8da76

  • SHA256

    2336a0509574504788e0023f34bebf29dce80c96044eaf789a3800a7c2c0fb1f

  • SHA512

    185dbcfeeaa0d1baa931d1ab3404e6ccc137a82e0a8d3a5aa95382c00d4d5f28f0103529622b48364ec3cbf7c0db95d5bc978b155df7bdef2423687dc36ce829

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4r:6u8ANCUdgfmD7zey0KUj6TjR9i4r

Malware Config

Targets

    • Target

      NEAS.093bca362d8cbb52d667f4655a8a3730.exe

    • Size

      122KB

    • MD5

      093bca362d8cbb52d667f4655a8a3730

    • SHA1

      4800e1e071c8ee189c70434c86aae44883e8da76

    • SHA256

      2336a0509574504788e0023f34bebf29dce80c96044eaf789a3800a7c2c0fb1f

    • SHA512

      185dbcfeeaa0d1baa931d1ab3404e6ccc137a82e0a8d3a5aa95382c00d4d5f28f0103529622b48364ec3cbf7c0db95d5bc978b155df7bdef2423687dc36ce829

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4r:6u8ANCUdgfmD7zey0KUj6TjR9i4r

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Modifies visibility of file extensions in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks