General

  • Target

    dc4a49f8df1c7352d0ea0c63ebba853e.exe

  • Size

    107KB

  • Sample

    240102-r9nqdsfgdk

  • MD5

    dc4a49f8df1c7352d0ea0c63ebba853e

  • SHA1

    f912a15b481efa4256843031be4fdd03e712840d

  • SHA256

    488c2f5ff62fd39bb49c33ac78185586130d2fbed78b400c87a3ea2e31394938

  • SHA512

    f0369946b116eee44f9bde9816c8bbc910aac27af323cb094f57b04c9c75ab7966293278350579fdfd8d15fda46417c12a46e04ec35c26507ef1b4d3c658618f

  • SSDEEP

    3072:xEC/opbUa+4rsLVwyiREriaMU7uihJ5233y:x/jJ5wqrini5i3y

Malware Config

Targets

    • Target

      dc4a49f8df1c7352d0ea0c63ebba853e.exe

    • Size

      107KB

    • MD5

      dc4a49f8df1c7352d0ea0c63ebba853e

    • SHA1

      f912a15b481efa4256843031be4fdd03e712840d

    • SHA256

      488c2f5ff62fd39bb49c33ac78185586130d2fbed78b400c87a3ea2e31394938

    • SHA512

      f0369946b116eee44f9bde9816c8bbc910aac27af323cb094f57b04c9c75ab7966293278350579fdfd8d15fda46417c12a46e04ec35c26507ef1b4d3c658618f

    • SSDEEP

      3072:xEC/opbUa+4rsLVwyiREriaMU7uihJ5233y:x/jJ5wqrini5i3y

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks