Overview

overview

10

Static

static

10

NEAS.cefaf...c0.exe

windows7-x64

10

NEAS.cefaf...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cefafb0663139958701332097f2bdcc0.exe

  • Size

    704KB

  • Sample

    231022-v15t4aag84

  • MD5

    cefafb0663139958701332097f2bdcc0

  • SHA1

    0b9ee40dfe2b86d7c9fe9190438c9ce5986a5388

  • SHA256

    1b632b818574b2644f0f92ea493653a398bded473fa309c54048f26c3cb771a1

  • SHA512

    d49b6bd710300922651f2d88d580268dee28c414925c37c132f50dd183be18310d7d53371d708c7a7d4bd6c5712db1e87735e0e1dbb6013d9295165a03b9e069

  • SSDEEP

    12288:5FXbGrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:HSrQg5Wm0BmmvFimm0MTP7hm0b

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cefafb0663139958701332097f2bdcc0.exe

    • Size

      704KB

    • MD5

      cefafb0663139958701332097f2bdcc0

    • SHA1

      0b9ee40dfe2b86d7c9fe9190438c9ce5986a5388

    • SHA256

      1b632b818574b2644f0f92ea493653a398bded473fa309c54048f26c3cb771a1

    • SHA512

      d49b6bd710300922651f2d88d580268dee28c414925c37c132f50dd183be18310d7d53371d708c7a7d4bd6c5712db1e87735e0e1dbb6013d9295165a03b9e069

    • SSDEEP

      12288:5FXbGrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:HSrQg5Wm0BmmvFimm0MTP7hm0b

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks