Overview

overview

10

Static

static

10

NEAS.c5865...50.exe

windows7-x64

10

NEAS.c5865...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c58654501eb0062bfe68d6f41d399d50.exe

  • Size

    459KB

  • Sample

    231028-yzmhxacd24

  • MD5

    c58654501eb0062bfe68d6f41d399d50

  • SHA1

    ffbe9dd49ff0d89187979d8ad031b68f3539ad7e

  • SHA256

    3b0353228c09317be6e9ba5132825ea9ccd50de2743808d2165a19574549d613

  • SHA512

    72b1a68af01903ed04ea5df5372512d69f184411704ecb7d3a1045bd5ab94aace2592760608533a463506d695b139df5185bed73942805b4ee14e9b95fd94e47

  • SSDEEP

    12288:Y5nowIaJwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdt:YhowLJwFfDy/phgeczlqczZd7LFB3oFl

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c58654501eb0062bfe68d6f41d399d50.exe

    • Size

      459KB

    • MD5

      c58654501eb0062bfe68d6f41d399d50

    • SHA1

      ffbe9dd49ff0d89187979d8ad031b68f3539ad7e

    • SHA256

      3b0353228c09317be6e9ba5132825ea9ccd50de2743808d2165a19574549d613

    • SHA512

      72b1a68af01903ed04ea5df5372512d69f184411704ecb7d3a1045bd5ab94aace2592760608533a463506d695b139df5185bed73942805b4ee14e9b95fd94e47

    • SSDEEP

      12288:Y5nowIaJwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdt:YhowLJwFfDy/phgeczlqczZd7LFB3oFl

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks