Overview

overview

10

Static

static

10

NEAS.fbc55...40.exe

windows7-x64

10

NEAS.fbc55...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fbc5554e4b4183c2bf14d26469a0a240.exe

  • Size

    198KB

  • Sample

    231028-y3475aeg89

  • MD5

    fbc5554e4b4183c2bf14d26469a0a240

  • SHA1

    458ce0f1ce62fdb5080efacf8374bf726c146cb1

  • SHA256

    c2f539056f16264af474446b7f65f02607693ecd146db775048d5257ef5eccde

  • SHA512

    bdef21956f0c024b17580520fc4b1b9deecef0c0d005b15da7ccbfe384bf79603342ae2d3a534581c9ab7c0b7f40bf726adf006127a94106fe3f03d28b3bee43

  • SSDEEP

    3072:T5Mk9cXAhY9MRtluj/QRXOFHt0nWi+4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6Ozrx:zcGY9MRtUTB1i+BOHhkym/89bKws

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fbc5554e4b4183c2bf14d26469a0a240.exe

    • Size

      198KB

    • MD5

      fbc5554e4b4183c2bf14d26469a0a240

    • SHA1

      458ce0f1ce62fdb5080efacf8374bf726c146cb1

    • SHA256

      c2f539056f16264af474446b7f65f02607693ecd146db775048d5257ef5eccde

    • SHA512

      bdef21956f0c024b17580520fc4b1b9deecef0c0d005b15da7ccbfe384bf79603342ae2d3a534581c9ab7c0b7f40bf726adf006127a94106fe3f03d28b3bee43

    • SSDEEP

      3072:T5Mk9cXAhY9MRtluj/QRXOFHt0nWi+4Sp+7H7wWkqrifbdB7dYk1Bx8DpsV6Ozrx:zcGY9MRtUTB1i+BOHhkym/89bKws

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks