Overview

overview

10

Static

static

10

NEAS.c508f...70.exe

windows7-x64

10

NEAS.c508f...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c508fb401ad470ef9eb27d2a3ceffb70.exe

  • Size

    67KB

  • Sample

    231021-1c6z5sag97

  • MD5

    c508fb401ad470ef9eb27d2a3ceffb70

  • SHA1

    4796ae43b1e96b45fdda7531d50131f61f744c91

  • SHA256

    3b33c573b2f7dba0a8a3445e94452566675e1e3c2a7b3ad0aecc2ca64280cd3c

  • SHA512

    c8aa0ddd6629b5b62601ac6f54555bcecb273440bbbb960ec7a386a35bfcd4b7c4a3555637aef354120b1e01ad9e6398f0a7958696da59a51679a709592fcc93

  • SSDEEP

    1536:9r8o2KPxRaIzdawvtCUkbsJifTduD4oTxw:93vH5zdaIbkbsJibdMTxw

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c508fb401ad470ef9eb27d2a3ceffb70.exe

    • Size

      67KB

    • MD5

      c508fb401ad470ef9eb27d2a3ceffb70

    • SHA1

      4796ae43b1e96b45fdda7531d50131f61f744c91

    • SHA256

      3b33c573b2f7dba0a8a3445e94452566675e1e3c2a7b3ad0aecc2ca64280cd3c

    • SHA512

      c8aa0ddd6629b5b62601ac6f54555bcecb273440bbbb960ec7a386a35bfcd4b7c4a3555637aef354120b1e01ad9e6398f0a7958696da59a51679a709592fcc93

    • SSDEEP

      1536:9r8o2KPxRaIzdawvtCUkbsJifTduD4oTxw:93vH5zdaIbkbsJibdMTxw

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks