General

  • Target

    NEAS.c981f360a3f4914780448d1f10dc9d00.exe

  • Size

    122KB

  • Sample

    231113-ggcgjsaf24

  • MD5

    c981f360a3f4914780448d1f10dc9d00

  • SHA1

    149b31fd8988aeac61ea716993cbf534b1854ad3

  • SHA256

    660381a58e0bb63be037a1cdfc3e43a6bdff5d7cf2f4592bb6334c804f80e116

  • SHA512

    2493a5c58faa6a7940d0cecc26a9be8617171748c8e9e93b5b09b147fb06d27e3a87e254d80acc98036215e5dfaaedcc0e9f0de7fb990b07ffdc7c448e002943

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4o:6u8ANCUdgfmD7zey0KUj6TjR9i4o

Malware Config

Targets

    • Target

      NEAS.c981f360a3f4914780448d1f10dc9d00.exe

    • Size

      122KB

    • MD5

      c981f360a3f4914780448d1f10dc9d00

    • SHA1

      149b31fd8988aeac61ea716993cbf534b1854ad3

    • SHA256

      660381a58e0bb63be037a1cdfc3e43a6bdff5d7cf2f4592bb6334c804f80e116

    • SHA512

      2493a5c58faa6a7940d0cecc26a9be8617171748c8e9e93b5b09b147fb06d27e3a87e254d80acc98036215e5dfaaedcc0e9f0de7fb990b07ffdc7c448e002943

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4o:6u8ANCUdgfmD7zey0KUj6TjR9i4o

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Modifies visibility of file extensions in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks