Overview

overview

10

Static

static

10

NEAS.c3883...5f.exe

windows7-x64

10

NEAS.c3883...5f.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c3883efe5324ccdf6a3c10c97680a95f.exe

  • Size

    141KB

  • Sample

    231101-vrtqgacf48

  • MD5

    c3883efe5324ccdf6a3c10c97680a95f

  • SHA1

    84ee786ac13155e61edafee3bde96ba219a7deba

  • SHA256

    77988fb152f89f55b2c793c1eb99c597b280f8040dd098b95d07bf3ce4aae39e

  • SHA512

    5a96979690b31aacda7a8d5b2560742b68a70e56bd2224f0117d6a2ffa12877dd9c460925c3840090556aa66296333aac7a50cb6beebc5a5b920a17fa6cd8ea9

  • SSDEEP

    3072:LqlLbRVHs9dFIwQ9bGCmBJFWpoPSkGFj/p7sW0l:mlLbRVMPFIN9bGCKJFtE/JK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c3883efe5324ccdf6a3c10c97680a95f.exe

    • Size

      141KB

    • MD5

      c3883efe5324ccdf6a3c10c97680a95f

    • SHA1

      84ee786ac13155e61edafee3bde96ba219a7deba

    • SHA256

      77988fb152f89f55b2c793c1eb99c597b280f8040dd098b95d07bf3ce4aae39e

    • SHA512

      5a96979690b31aacda7a8d5b2560742b68a70e56bd2224f0117d6a2ffa12877dd9c460925c3840090556aa66296333aac7a50cb6beebc5a5b920a17fa6cd8ea9

    • SSDEEP

      3072:LqlLbRVHs9dFIwQ9bGCmBJFWpoPSkGFj/p7sW0l:mlLbRVMPFIN9bGCKJFtE/JK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks