General

  • Target

    virussign.com_45a03a2a8b56a6296a6b3c065e8c7240.vir

  • Size

    302KB

  • Sample

    240602-lmksbshd9s

  • MD5

    45a03a2a8b56a6296a6b3c065e8c7240

  • SHA1

    4f6a4217b82cf69cbb978720ed4b172b2257b0be

  • SHA256

    d14b2f8b035c25d2a37c5cb8686705dfb7250c61b3467d5b75fa721e25169baa

  • SHA512

    b6e3dd7d9f613de99eb58d363ca64279069064627d5c4df5451954ffb01ac86fb1236e30ad1b5caec4cba2c374ba2e45ff7e281785c46b42fc26c8e71472737b

  • SSDEEP

    6144:iIxKqqMweL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:pxVqMNv8lXhuT9XvEhdfEmwlY1

Malware Config

Targets

    • Target

      virussign.com_45a03a2a8b56a6296a6b3c065e8c7240.vir

    • Size

      302KB

    • MD5

      45a03a2a8b56a6296a6b3c065e8c7240

    • SHA1

      4f6a4217b82cf69cbb978720ed4b172b2257b0be

    • SHA256

      d14b2f8b035c25d2a37c5cb8686705dfb7250c61b3467d5b75fa721e25169baa

    • SHA512

      b6e3dd7d9f613de99eb58d363ca64279069064627d5c4df5451954ffb01ac86fb1236e30ad1b5caec4cba2c374ba2e45ff7e281785c46b42fc26c8e71472737b

    • SSDEEP

      6144:iIxKqqMweL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:pxVqMNv8lXhuT9XvEhdfEmwlY1

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Dropper & Backdoor - Berbew

      Berbew is a backdoor Trojan malware with capabilities to download and install a range of additional malicious software, such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks