Overview

overview

10

Static

static

10

NEAS.fe4fc...10.exe

windows7-x64

10

NEAS.fe4fc...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fe4fc7542d891d08a7b23ec66f933710.exe

  • Size

    115KB

  • Sample

    231022-v5f2jadb67

  • MD5

    fe4fc7542d891d08a7b23ec66f933710

  • SHA1

    c85b1921d5b66733d53c406ce3bf123523e67882

  • SHA256

    76716e017620fa08bdd91fbffb7f18ffb2592d4577060ed8169a416724dfd187

  • SHA512

    f2fa2afa81eb925746b0ca42186a94c765f37e73f01f350686ec43fc88d2719888a96a554e278368fa5a5bdcc4ed57708fab9bb33ef4732ae071317a020c3421

  • SSDEEP

    3072:AJW1L1aBBr/LSgXXFW2VTbWymWU6SMQehalNgFuk0:sW1+fXXf6ymWU5MClN5

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fe4fc7542d891d08a7b23ec66f933710.exe

    • Size

      115KB

    • MD5

      fe4fc7542d891d08a7b23ec66f933710

    • SHA1

      c85b1921d5b66733d53c406ce3bf123523e67882

    • SHA256

      76716e017620fa08bdd91fbffb7f18ffb2592d4577060ed8169a416724dfd187

    • SHA512

      f2fa2afa81eb925746b0ca42186a94c765f37e73f01f350686ec43fc88d2719888a96a554e278368fa5a5bdcc4ed57708fab9bb33ef4732ae071317a020c3421

    • SSDEEP

      3072:AJW1L1aBBr/LSgXXFW2VTbWymWU6SMQehalNgFuk0:sW1+fXXf6ymWU5MClN5

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks