Overview

overview

10

Static

static

10

NEAS.bfcb0...d0.exe

windows7-x64

10

NEAS.bfcb0...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bfcb0b0dc07c3663219839ebc1cf3ad0.exe

  • Size

    109KB

  • Sample

    231028-yy6v6aad8t

  • MD5

    bfcb0b0dc07c3663219839ebc1cf3ad0

  • SHA1

    6b9800a1de2f0de530eb7f40e9008f0367f64544

  • SHA256

    6474ab0be638da90a340d0328f8279d29c8ac5d0da0e4ea05037af6d61cd22a8

  • SHA512

    b3d59af6bc49dbd35b14b99fd9a461f13b0f2f14465f656350cae5dec11b16f31b1bd04601ffdce1d138d030601451b92b74e843f77e61d6288505a1955f2a66

  • SSDEEP

    3072:pcvZuAU97V8hN2J9rLCqwzBu1DjHLMVDqqkSpR:pcE9+2J93wtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bfcb0b0dc07c3663219839ebc1cf3ad0.exe

    • Size

      109KB

    • MD5

      bfcb0b0dc07c3663219839ebc1cf3ad0

    • SHA1

      6b9800a1de2f0de530eb7f40e9008f0367f64544

    • SHA256

      6474ab0be638da90a340d0328f8279d29c8ac5d0da0e4ea05037af6d61cd22a8

    • SHA512

      b3d59af6bc49dbd35b14b99fd9a461f13b0f2f14465f656350cae5dec11b16f31b1bd04601ffdce1d138d030601451b92b74e843f77e61d6288505a1955f2a66

    • SSDEEP

      3072:pcvZuAU97V8hN2J9rLCqwzBu1DjHLMVDqqkSpR:pcE9+2J93wtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks