Overview

overview

10

Static

static

10

NEAS.f8c54...60.exe

windows7-x64

10

NEAS.f8c54...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f8c54a57457f0cb7d888d048f2fbb760.exe

  • Size

    141KB

  • Sample

    231028-y3yqcada81

  • MD5

    f8c54a57457f0cb7d888d048f2fbb760

  • SHA1

    4c1feb9c4e9b465881526ed8309435a5a660896e

  • SHA256

    a628a3d28bea0a6295fed9fb2a62d38e0c3b631942e8293dc2c9af24a46306fb

  • SHA512

    bbce4cea7bb16a9a65f7084926333226d2bc3e0abe5e3acb616c4f3d183ac8e6d870005ff2be6e8afadd35a0e8217549b90493bdeceb60618fb841ecbae22a83

  • SSDEEP

    3072:em2KdL4YlaFbuwQ9bGCmBJFWpoPSkGFj/p7sW0l:T2KdL4YlaF6N9bGCKJFtE/JK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f8c54a57457f0cb7d888d048f2fbb760.exe

    • Size

      141KB

    • MD5

      f8c54a57457f0cb7d888d048f2fbb760

    • SHA1

      4c1feb9c4e9b465881526ed8309435a5a660896e

    • SHA256

      a628a3d28bea0a6295fed9fb2a62d38e0c3b631942e8293dc2c9af24a46306fb

    • SHA512

      bbce4cea7bb16a9a65f7084926333226d2bc3e0abe5e3acb616c4f3d183ac8e6d870005ff2be6e8afadd35a0e8217549b90493bdeceb60618fb841ecbae22a83

    • SSDEEP

      3072:em2KdL4YlaFbuwQ9bGCmBJFWpoPSkGFj/p7sW0l:T2KdL4YlaF6N9bGCKJFtE/JK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks