General

  • Target

    338a5f2df9692db11a9a45046fe94786e7902ccbee7bb21ed3c0e99ec822a175.exe

  • Size

    565KB

  • Sample

    240522-x4mtssdf37

  • MD5

    0941bad2745efe2c8c14455002f74e50

  • SHA1

    1990520cf4ae6165004915adb49884928825af1b

  • SHA256

    338a5f2df9692db11a9a45046fe94786e7902ccbee7bb21ed3c0e99ec822a175

  • SHA512

    6af43fd3497c5be4555ba5eeb6ad04cfd192e280a56665e422714798b40a1557e65b7a617aeec2750de8f8517deab275fa25dabf67e3803d377d7c635cfd74b0

  • SSDEEP

    12288:FmiVtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:tVtuFjAh/mvFimm09OX

Malware Config

Targets

    • Target

      338a5f2df9692db11a9a45046fe94786e7902ccbee7bb21ed3c0e99ec822a175.exe

    • Size

      565KB

    • MD5

      0941bad2745efe2c8c14455002f74e50

    • SHA1

      1990520cf4ae6165004915adb49884928825af1b

    • SHA256

      338a5f2df9692db11a9a45046fe94786e7902ccbee7bb21ed3c0e99ec822a175

    • SHA512

      6af43fd3497c5be4555ba5eeb6ad04cfd192e280a56665e422714798b40a1557e65b7a617aeec2750de8f8517deab275fa25dabf67e3803d377d7c635cfd74b0

    • SSDEEP

      12288:FmiVtuFjAh//+zrWAIAqWim/+zrWAI5KF8OX:tVtuFjAh/mvFimm09OX

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks