Overview

overview

10

Static

static

10

NEAS.cc385...10.exe

windows7-x64

NEAS.cc385...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cc385352b6bee1bfac72b7a4b6ee0d10.exe

  • Size

    138KB

  • Sample

    231021-1dp31sbc43

  • MD5

    cc385352b6bee1bfac72b7a4b6ee0d10

  • SHA1

    3f6dca8021bd8098b88b5f5ebfb5e94956946b29

  • SHA256

    f8ab1a4d4f3f70cd66e9041a3d0135ccd7d0fc91840229734a34767a31aa2244

  • SHA512

    b3eca837474e75cedab24489eea1fe6dc2ce6535abc05f9487ad06fb2f3316532f8faadebb4be418341b23912905b068441042fdc63f41360f669ead12d74fcb

  • SSDEEP

    1536:uAd1QJnwzjkqr/ZW0U9anw2hX9ZcWiqgF72S7f/QuMXi1oHk3CYy7rDpjq6:uYCnwrZwawEX9mW2wS7IrHrY8pjq6

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cc385352b6bee1bfac72b7a4b6ee0d10.exe

    • Size

      138KB

    • MD5

      cc385352b6bee1bfac72b7a4b6ee0d10

    • SHA1

      3f6dca8021bd8098b88b5f5ebfb5e94956946b29

    • SHA256

      f8ab1a4d4f3f70cd66e9041a3d0135ccd7d0fc91840229734a34767a31aa2244

    • SHA512

      b3eca837474e75cedab24489eea1fe6dc2ce6535abc05f9487ad06fb2f3316532f8faadebb4be418341b23912905b068441042fdc63f41360f669ead12d74fcb

    • SSDEEP

      1536:uAd1QJnwzjkqr/ZW0U9anw2hX9ZcWiqgF72S7f/QuMXi1oHk3CYy7rDpjq6:uYCnwrZwawEX9mW2wS7IrHrY8pjq6

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks