Overview

overview

10

Static

static

10

NEAS.fca69...70.exe

windows7-x64

10

NEAS.fca69...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fca6971ad9720b1a3bb9f9ccf15e6e70.exe

  • Size

    153KB

  • Sample

    231022-v5czwadb25

  • MD5

    fca6971ad9720b1a3bb9f9ccf15e6e70

  • SHA1

    464cc6f3f8595584d488ce6c7740c440e289df0b

  • SHA256

    fc7a1eb6868df664a7ed781423db9878c6f7b2db0625f52908fcd697b9cab15e

  • SHA512

    ed6c2bc9079f473f4aeb5b289a8989d6ddedf1c26410df87582de813ea106ff1ec25ac40c334197858cf0527cab14b90f3734a209c9bbf296ae7869327394043

  • SSDEEP

    3072:BTwFE2t/79BiUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:BTAEa7LZAHj05xP3DZyN1eRppzcexn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fca6971ad9720b1a3bb9f9ccf15e6e70.exe

    • Size

      153KB

    • MD5

      fca6971ad9720b1a3bb9f9ccf15e6e70

    • SHA1

      464cc6f3f8595584d488ce6c7740c440e289df0b

    • SHA256

      fc7a1eb6868df664a7ed781423db9878c6f7b2db0625f52908fcd697b9cab15e

    • SHA512

      ed6c2bc9079f473f4aeb5b289a8989d6ddedf1c26410df87582de813ea106ff1ec25ac40c334197858cf0527cab14b90f3734a209c9bbf296ae7869327394043

    • SSDEEP

      3072:BTwFE2t/79BiUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:BTAEa7LZAHj05xP3DZyN1eRppzcexn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks