Overview

overview

10

Static

static

10

NEAS.cd14c...f0.exe

windows7-x64

10

NEAS.cd14c...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cd14cd4856a14c72f491fd3e7ce5a6f0.exe

  • Size

    347KB

  • Sample

    231028-yz3vwscf52

  • MD5

    cd14cd4856a14c72f491fd3e7ce5a6f0

  • SHA1

    7435f95d957c9736c20588fc943908468365c863

  • SHA256

    dcde6c4971fced91b70521b06d17b94bff06910fc806de0b8f548dd047a5a368

  • SHA512

    452dab7f613b7363917fbb794d89f5fed5c19971b1d8ed536b1e163f9e8d8fbcf6d127de7e8a122e10feeea8d4c9305643df11ff459ea934d3dc9731a4eb56ad

  • SSDEEP

    6144:JXY09K235Gx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:RYuIx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cd14cd4856a14c72f491fd3e7ce5a6f0.exe

    • Size

      347KB

    • MD5

      cd14cd4856a14c72f491fd3e7ce5a6f0

    • SHA1

      7435f95d957c9736c20588fc943908468365c863

    • SHA256

      dcde6c4971fced91b70521b06d17b94bff06910fc806de0b8f548dd047a5a368

    • SHA512

      452dab7f613b7363917fbb794d89f5fed5c19971b1d8ed536b1e163f9e8d8fbcf6d127de7e8a122e10feeea8d4c9305643df11ff459ea934d3dc9731a4eb56ad

    • SSDEEP

      6144:JXY09K235Gx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:RYuIx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks