General

  • Target

    7a3f799e14f16739f295587bebbdd1ab5b6c59b853ceed41b335ca3c07ed9269N

  • Size

    59KB

  • Sample

    241107-hs4wlsxkat

  • MD5

    cc62b012808a8ce71cc6b2a65b8328f0

  • SHA1

    56b06689754fcc1d6eb1a97f6f6b20f48d06ac13

  • SHA256

    7a3f799e14f16739f295587bebbdd1ab5b6c59b853ceed41b335ca3c07ed9269

  • SHA512

    40e07fe2438fd91b3c4c19cd24c5be7fb7a0c3a73ae5aebd65100ffc0b026721a317390dbc977cd2dd362a2cc216fa3a9d1e03018e8337c3c4b70c3ab0ae2fd5

  • SSDEEP

    768:DXzmWfqhinPVPA+Rm6co/gwxo4kX9qZt6kkY50wx8Z/1H5FE5nf1fZMEBFELvkVB:rzlfqGPVI+DcQgz4kUWrTJ3gNCyVso

Malware Config

Targets

    • Target

      7a3f799e14f16739f295587bebbdd1ab5b6c59b853ceed41b335ca3c07ed9269N

    • Size

      59KB

    • MD5

      cc62b012808a8ce71cc6b2a65b8328f0

    • SHA1

      56b06689754fcc1d6eb1a97f6f6b20f48d06ac13

    • SHA256

      7a3f799e14f16739f295587bebbdd1ab5b6c59b853ceed41b335ca3c07ed9269

    • SHA512

      40e07fe2438fd91b3c4c19cd24c5be7fb7a0c3a73ae5aebd65100ffc0b026721a317390dbc977cd2dd362a2cc216fa3a9d1e03018e8337c3c4b70c3ab0ae2fd5

    • SSDEEP

      768:DXzmWfqhinPVPA+Rm6co/gwxo4kX9qZt6kkY50wx8Z/1H5FE5nf1fZMEBFELvkVB:rzlfqGPVI+DcQgz4kUWrTJ3gNCyVso

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Berbew

      Berbew is a backdoor written in C++.

    • Berbew family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks