Overview

overview

10

Static

static

10

NEAS.dc182...ec.exe

windows7-x64

10

NEAS.dc182...ec.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dc18279deda951056ecf67d137f90eec.exe

  • Size

    302KB

  • Sample

    231031-kkzyssce54

  • MD5

    dc18279deda951056ecf67d137f90eec

  • SHA1

    5f1d1f0763f38f93b52b790e7c5f72c8ed81c9fe

  • SHA256

    c3fdec2bce066d0a2d736d06e9adfb121f493f7e640235009b6b0a0712d1a77e

  • SHA512

    255205ca3329fcbeda3f7409d305b726fca99a07f7c222b0c9cdb565874a828e3f55d6ef5bb9637fdfa49a1f5c185476b25721707cd38a6971b093cd7330a760

  • SSDEEP

    6144:iZiiY3OYruegL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:iZdSNulv8lXhuT9XvEhdfEmwlY1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dc18279deda951056ecf67d137f90eec.exe

    • Size

      302KB

    • MD5

      dc18279deda951056ecf67d137f90eec

    • SHA1

      5f1d1f0763f38f93b52b790e7c5f72c8ed81c9fe

    • SHA256

      c3fdec2bce066d0a2d736d06e9adfb121f493f7e640235009b6b0a0712d1a77e

    • SHA512

      255205ca3329fcbeda3f7409d305b726fca99a07f7c222b0c9cdb565874a828e3f55d6ef5bb9637fdfa49a1f5c185476b25721707cd38a6971b093cd7330a760

    • SSDEEP

      6144:iZiiY3OYruegL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:iZdSNulv8lXhuT9XvEhdfEmwlY1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks