General

  • Target

    b728d3dc05a744ca2bb52c3770ed0f90.exe

  • Size

    401KB

  • Sample

    240110-wmvmmscfbn

  • MD5

    b728d3dc05a744ca2bb52c3770ed0f90

  • SHA1

    e22b555ab91c65c532863cf62bf3e49f5032b32c

  • SHA256

    3b262b2cc852cce01eafc5355b79e909a3054c66590217239b31a222964fd0c5

  • SHA512

    dd2cedfc6bb06eabbf99e0636a5594b7d39c8b5b1904696ea15a53b28403dfa71e626508545469340e786cfbbadac75ea7798f16e4e51b5eb4d840854be27c03

  • SSDEEP

    6144:44xsTvkwsOWy87vGfndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:4xvkwdhndpV6yYP4rbpV6yYPg058KrY

Malware Config

Targets

    • Target

      b728d3dc05a744ca2bb52c3770ed0f90.exe

    • Size

      401KB

    • MD5

      b728d3dc05a744ca2bb52c3770ed0f90

    • SHA1

      e22b555ab91c65c532863cf62bf3e49f5032b32c

    • SHA256

      3b262b2cc852cce01eafc5355b79e909a3054c66590217239b31a222964fd0c5

    • SHA512

      dd2cedfc6bb06eabbf99e0636a5594b7d39c8b5b1904696ea15a53b28403dfa71e626508545469340e786cfbbadac75ea7798f16e4e51b5eb4d840854be27c03

    • SSDEEP

      6144:44xsTvkwsOWy87vGfndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:4xvkwdhndpV6yYP4rbpV6yYPg058KrY

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks