General

  • Target

    NEAS.f533d280af8dc3733760bea3ef1f1ca0.exe

  • Size

    122KB

  • Sample

    231116-25shwsbd57

  • MD5

    f533d280af8dc3733760bea3ef1f1ca0

  • SHA1

    cdb972d5df18bcd5758dfe5e9e1da60ccf3cb892

  • SHA256

    0a889c23900e3e29f1796624bf666e53d4a578fb518fc4e66d4471efa36c9989

  • SHA512

    736da9f42d8154828b5d508bc29aa96ed38eabf1799494adb2ee9b5ef43c8be3e1ce055df976df4694beb3e7b693be69959b2fadf611a9ca4a2f19cca73a03d9

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4+:6u8ANCUdgfmD7zey0KUj6TjR9i4+

Malware Config

Targets

    • Target

      NEAS.f533d280af8dc3733760bea3ef1f1ca0.exe

    • Size

      122KB

    • MD5

      f533d280af8dc3733760bea3ef1f1ca0

    • SHA1

      cdb972d5df18bcd5758dfe5e9e1da60ccf3cb892

    • SHA256

      0a889c23900e3e29f1796624bf666e53d4a578fb518fc4e66d4471efa36c9989

    • SHA512

      736da9f42d8154828b5d508bc29aa96ed38eabf1799494adb2ee9b5ef43c8be3e1ce055df976df4694beb3e7b693be69959b2fadf611a9ca4a2f19cca73a03d9

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4+:6u8ANCUdgfmD7zey0KUj6TjR9i4+

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Modifies visibility of file extensions in Explorer

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks