Overview

overview

10

Static

static

10

NEAS.fa102...60.exe

windows7-x64

10

NEAS.fa102...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fa102c36b64f8fb948aaab0b1a91db60.exe

  • Size

    115KB

  • Sample

    231021-1g5mwadg69

  • MD5

    fa102c36b64f8fb948aaab0b1a91db60

  • SHA1

    d6b7e70de2651e5568e3c84fe14adf15bfb41fbe

  • SHA256

    e7a4451206712fa9bc3599a5ee4218ed0d02167595a805cac08463226f9cc6e9

  • SHA512

    592f5b17cc42fbbb7200500d9b9c3c3891ebbfb5033bd0a7c5e0401625cd5734c57efa7483ca3c2a378a564411aff56ece0feb274d701afcddd61541b9b7cb48

  • SSDEEP

    3072:jc8n2n+tXYFW2VTbWymWU6SMQehalNgFuk0:jc8n2nAXYf6ymWU5MClN5

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fa102c36b64f8fb948aaab0b1a91db60.exe

    • Size

      115KB

    • MD5

      fa102c36b64f8fb948aaab0b1a91db60

    • SHA1

      d6b7e70de2651e5568e3c84fe14adf15bfb41fbe

    • SHA256

      e7a4451206712fa9bc3599a5ee4218ed0d02167595a805cac08463226f9cc6e9

    • SHA512

      592f5b17cc42fbbb7200500d9b9c3c3891ebbfb5033bd0a7c5e0401625cd5734c57efa7483ca3c2a378a564411aff56ece0feb274d701afcddd61541b9b7cb48

    • SSDEEP

      3072:jc8n2n+tXYFW2VTbWymWU6SMQehalNgFuk0:jc8n2nAXYf6ymWU5MClN5

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks