General

  • Target

    6a577d674a7125e460dfda0e71fb14a30e90cc83cd923e42b79b4bf6a14ffaccN

  • Size

    59KB

  • Sample

    241107-hstewazqfj

  • MD5

    ba8d573f83083f5157e6a2aa52bb0720

  • SHA1

    24e0b43a439b3a05486fb909cd6e5090d3ca3add

  • SHA256

    6a577d674a7125e460dfda0e71fb14a30e90cc83cd923e42b79b4bf6a14ffacc

  • SHA512

    3d1b7d5b7a7fda81e7ff70a8682a172079c694db0595c468f5349ba3596f0350120d5723522442e92d7a74224d33037b5094615c97710c68e5aa6d7973168527

  • SSDEEP

    1536:TVQhSusPmTCedNYLEnby2LscA9rySNCyVso:WDzdiLeL4h9Aeso

Malware Config

Targets

    • Target

      6a577d674a7125e460dfda0e71fb14a30e90cc83cd923e42b79b4bf6a14ffaccN

    • Size

      59KB

    • MD5

      ba8d573f83083f5157e6a2aa52bb0720

    • SHA1

      24e0b43a439b3a05486fb909cd6e5090d3ca3add

    • SHA256

      6a577d674a7125e460dfda0e71fb14a30e90cc83cd923e42b79b4bf6a14ffacc

    • SHA512

      3d1b7d5b7a7fda81e7ff70a8682a172079c694db0595c468f5349ba3596f0350120d5723522442e92d7a74224d33037b5094615c97710c68e5aa6d7973168527

    • SSDEEP

      1536:TVQhSusPmTCedNYLEnby2LscA9rySNCyVso:WDzdiLeL4h9Aeso

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Berbew

      Berbew is a backdoor written in C++.

    • Berbew family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks