Overview

overview

10

Static

static

10

NEAS.c5a5e...b0.exe

windows7-x64

10

NEAS.c5a5e...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c5a5e3588539c5d07ddb119917a24bb0.exe

  • Size

    378KB

  • Sample

    231021-1c8hzaah45

  • MD5

    c5a5e3588539c5d07ddb119917a24bb0

  • SHA1

    d24f6f883b9e6a8a2fc2aaeae9f950eefc58062a

  • SHA256

    f9a89ba42a4fe6e0b17e0101844006751cf1def8464fc50c63e8dd7b27b33ee1

  • SHA512

    396fa68d7cb3076f54824c4d1f83cf2f86907a82143636f86ba23e7d41695656eb3e281d5105d5cca9a937a207cce2494023107ed983ab8efa5a5b67cbc65467

  • SSDEEP

    6144:7dN77YcEgeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJD:z7UBgeYr75lTefkY660fIaDZkY660f28

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c5a5e3588539c5d07ddb119917a24bb0.exe

    • Size

      378KB

    • MD5

      c5a5e3588539c5d07ddb119917a24bb0

    • SHA1

      d24f6f883b9e6a8a2fc2aaeae9f950eefc58062a

    • SHA256

      f9a89ba42a4fe6e0b17e0101844006751cf1def8464fc50c63e8dd7b27b33ee1

    • SHA512

      396fa68d7cb3076f54824c4d1f83cf2f86907a82143636f86ba23e7d41695656eb3e281d5105d5cca9a937a207cce2494023107ed983ab8efa5a5b67cbc65467

    • SSDEEP

      6144:7dN77YcEgeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQMJD:z7UBgeYr75lTefkY660fIaDZkY660f28

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks