Overview

overview

10

Static

static

10

NEAS.fc623...b0.exe

windows7-x64

NEAS.fc623...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fc623db10471625e61f8182af21847b0.exe

  • Size

    1.6MB

  • Sample

    231021-1g98csca6z

  • MD5

    fc623db10471625e61f8182af21847b0

  • SHA1

    29c2c96f4a27ceb0beb57ecec91a8486881ea09c

  • SHA256

    faba39aa0da404f56fb1fe089c4762fb15545d7d316b40911606e1ab42f7a28a

  • SHA512

    c060e4cbd1e9f8d7561b7ff7e2b807faa7e29922088ba4e4d3b16541a60d9f06d612c8438d4c05c1a816add34748c9c835b15fe6bc29cc56e59dbb1846391420

  • SSDEEP

    24576:EtSwwL2vzecI50+YNpsKv2EvZHp3oWB+:EtSwwL2vKcIKLXZ3+

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fc623db10471625e61f8182af21847b0.exe

    • Size

      1.6MB

    • MD5

      fc623db10471625e61f8182af21847b0

    • SHA1

      29c2c96f4a27ceb0beb57ecec91a8486881ea09c

    • SHA256

      faba39aa0da404f56fb1fe089c4762fb15545d7d316b40911606e1ab42f7a28a

    • SHA512

      c060e4cbd1e9f8d7561b7ff7e2b807faa7e29922088ba4e4d3b16541a60d9f06d612c8438d4c05c1a816add34748c9c835b15fe6bc29cc56e59dbb1846391420

    • SSDEEP

      24576:EtSwwL2vzecI50+YNpsKv2EvZHp3oWB+:EtSwwL2vKcIKLXZ3+

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks