Overview

overview

10

Static

static

10

NEAS.2c61d...70.exe

windows7-x64

10

NEAS.2c61d...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2c61d6451a4eb379e4779d019632c070.exe

  • Size

    89KB

  • Sample

    231028-wn6fjaed3z

  • MD5

    2c61d6451a4eb379e4779d019632c070

  • SHA1

    d03667930dab97e1fbb77cf72fa6ef7e9547d11f

  • SHA256

    4a44ece1aeeec7c74e7106c7dd27ea29c3196a41421b1f22ff1bd8e559c8079b

  • SHA512

    0a7b6024a2f2915db44ad734cb4ae87265939e2e6e2bf6e7216085d1b15ff2b9a4c3150b9202eee6cb9e6a40814b337280d987e0e1b6e823ef72f250e09815c0

  • SSDEEP

    1536:Kka5li0MPcdMqvvG13RArAksVXZh+xkfxiIJFqdH2fLVklcVefAkjDcolExkg8Fk:oZoqMqnG13GrAkkJhvsKqdH2fvHkjDcP

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.2c61d6451a4eb379e4779d019632c070.exe

    • Size

      89KB

    • MD5

      2c61d6451a4eb379e4779d019632c070

    • SHA1

      d03667930dab97e1fbb77cf72fa6ef7e9547d11f

    • SHA256

      4a44ece1aeeec7c74e7106c7dd27ea29c3196a41421b1f22ff1bd8e559c8079b

    • SHA512

      0a7b6024a2f2915db44ad734cb4ae87265939e2e6e2bf6e7216085d1b15ff2b9a4c3150b9202eee6cb9e6a40814b337280d987e0e1b6e823ef72f250e09815c0

    • SSDEEP

      1536:Kka5li0MPcdMqvvG13RArAksVXZh+xkfxiIJFqdH2fLVklcVefAkjDcolExkg8Fk:oZoqMqnG13GrAkkJhvsKqdH2fvHkjDcP

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks