Overview

overview

10

Static

static

10

NEAS.ccb54...6c.exe

windows7-x64

10

NEAS.ccb54...6c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ccb540bbe8926344e4f54670dc39e46c.exe

  • Size

    77KB

  • Sample

    231031-kkt3jscd66

  • MD5

    ccb540bbe8926344e4f54670dc39e46c

  • SHA1

    f3ecc2fc0b2f6aa9343b971b74e0668eb79fc8b5

  • SHA256

    1c5b28719b32f89ad51d1d6b2ebe87a6440c6e29ee044d579f68f6dbc87c47d1

  • SHA512

    250567407057375374d8e1205b7baff1959cccbae98f477ef88c71b5291fade1ce983cb0e922b10b27ccc289a2551bbfd3be9037f82a6602b5da3ccf9f08992a

  • SSDEEP

    1536:cjQr77ds4lTyEuGqbtYQkCKkqY/Y2rUaxzKVOhF4FI2Ltpwfi+TjRC/D:trzlT5uzbtnfOTsKkWzwf1TjYD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ccb540bbe8926344e4f54670dc39e46c.exe

    • Size

      77KB

    • MD5

      ccb540bbe8926344e4f54670dc39e46c

    • SHA1

      f3ecc2fc0b2f6aa9343b971b74e0668eb79fc8b5

    • SHA256

      1c5b28719b32f89ad51d1d6b2ebe87a6440c6e29ee044d579f68f6dbc87c47d1

    • SHA512

      250567407057375374d8e1205b7baff1959cccbae98f477ef88c71b5291fade1ce983cb0e922b10b27ccc289a2551bbfd3be9037f82a6602b5da3ccf9f08992a

    • SSDEEP

      1536:cjQr77ds4lTyEuGqbtYQkCKkqY/Y2rUaxzKVOhF4FI2Ltpwfi+TjRC/D:trzlT5uzbtnfOTsKkWzwf1TjYD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks