General

  • Target

    35b0c2aa219bce5fade0ad13c3c04d33f6bd59e450d5a2278368550ffc95ade3N

  • Size

    59KB

  • Sample

    241109-hg428szdmp

  • MD5

    e7d194a5a210302baaea79a30beb31f0

  • SHA1

    a46195775b75a41d6182bba878a8db976c4e5f5e

  • SHA256

    35b0c2aa219bce5fade0ad13c3c04d33f6bd59e450d5a2278368550ffc95ade3

  • SHA512

    6e6d7a4afe23f61148ddb062566f51014a40f9da04791468e4913f3b144cfabaa79de4fbdfdad659dcb928563cd7a127af8a5fd32b0422ec0ad30789c737d699

  • SSDEEP

    768:WqVx5sS+8DiBTtb+Cd5UQsu+ClOaIJ5Ns92TXtrZ/1H5Yk5nf1fZMEBFELvkVgFR:WqoP+C2ClWs9a3OANCyVs

Malware Config

Targets

    • Target

      35b0c2aa219bce5fade0ad13c3c04d33f6bd59e450d5a2278368550ffc95ade3N

    • Size

      59KB

    • MD5

      e7d194a5a210302baaea79a30beb31f0

    • SHA1

      a46195775b75a41d6182bba878a8db976c4e5f5e

    • SHA256

      35b0c2aa219bce5fade0ad13c3c04d33f6bd59e450d5a2278368550ffc95ade3

    • SHA512

      6e6d7a4afe23f61148ddb062566f51014a40f9da04791468e4913f3b144cfabaa79de4fbdfdad659dcb928563cd7a127af8a5fd32b0422ec0ad30789c737d699

    • SSDEEP

      768:WqVx5sS+8DiBTtb+Cd5UQsu+ClOaIJ5Ns92TXtrZ/1H5Yk5nf1fZMEBFELvkVgFR:WqoP+C2ClWs9a3OANCyVs

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Berbew

      Berbew is a backdoor written in C++.

    • Berbew family

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks