General

  • Target

    c3c87519691786757ce1b5f3e0e7617c.exe

  • Size

    155KB

  • Sample

    231126-ls6xrage63

  • MD5

    c3c87519691786757ce1b5f3e0e7617c

  • SHA1

    d6b99f6ea77bfa5c0309a01193fbabbb1695eb9b

  • SHA256

    841f28aa11cec53e997890e8cb7aa9d9f4c3278c10c57cefc91350b9e8e2688a

  • SHA512

    8d9fa0457d5464152791a3ce5de0ff7c440b298c71956990dacb393dfd7ce422ac974b56ca3886efd9b91c659961418452cd8ffbf8a27fb8c12b2b1ddbdfba73

  • SSDEEP

    3072:yJLCCorH2hTdam/aeyYu74PUobYdbTrqEznYfzB9BSwWO:yJLCCoyTdam/2Yu88NTrqYOzLcK

Malware Config

Targets

    • Target

      c3c87519691786757ce1b5f3e0e7617c.exe

    • Size

      155KB

    • MD5

      c3c87519691786757ce1b5f3e0e7617c

    • SHA1

      d6b99f6ea77bfa5c0309a01193fbabbb1695eb9b

    • SHA256

      841f28aa11cec53e997890e8cb7aa9d9f4c3278c10c57cefc91350b9e8e2688a

    • SHA512

      8d9fa0457d5464152791a3ce5de0ff7c440b298c71956990dacb393dfd7ce422ac974b56ca3886efd9b91c659961418452cd8ffbf8a27fb8c12b2b1ddbdfba73

    • SSDEEP

      3072:yJLCCorH2hTdam/aeyYu74PUobYdbTrqEznYfzB9BSwWO:yJLCCoyTdam/2Yu88NTrqYOzLcK

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks