Overview

overview

10

Static

static

10

NEAS.c8681...b0.exe

windows7-x64

10

NEAS.c8681...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c86814d24b0e28fb33b230745f8d12b0.exe

  • Size

    391KB

  • Sample

    231028-yzsd6aah3s

  • MD5

    c86814d24b0e28fb33b230745f8d12b0

  • SHA1

    5409259bce78629502bb452558e252aa3a95c899

  • SHA256

    d3114224e952297b1f05bf3b59ef9af0794801ca0be7941d53ad72ef365ca183

  • SHA512

    e29e44f3ac0200e68e0a07bfdd55b7090d850af425abe806c48fbeb75f3a1e8c29fba607d53fa223f79042c12659afec46c4318011b9391bd40222ff5a1283d5

  • SSDEEP

    12288:n3cnXZ6dAj2x2rFT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:nGXZ142p9XvEhdfJkKSkU3kHyuaRB5tW

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c86814d24b0e28fb33b230745f8d12b0.exe

    • Size

      391KB

    • MD5

      c86814d24b0e28fb33b230745f8d12b0

    • SHA1

      5409259bce78629502bb452558e252aa3a95c899

    • SHA256

      d3114224e952297b1f05bf3b59ef9af0794801ca0be7941d53ad72ef365ca183

    • SHA512

      e29e44f3ac0200e68e0a07bfdd55b7090d850af425abe806c48fbeb75f3a1e8c29fba607d53fa223f79042c12659afec46c4318011b9391bd40222ff5a1283d5

    • SSDEEP

      12288:n3cnXZ6dAj2x2rFT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:nGXZ142p9XvEhdfJkKSkU3kHyuaRB5tW

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks