Overview

overview

10

Static

static

10

NEAS.d3c31...e0.exe

windows7-x64

10

NEAS.d3c31...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d3c31ad06fc161cf94581c9061216ce0.exe

  • Size

    492KB

  • Sample

    231102-khdyjshf3v

  • MD5

    d3c31ad06fc161cf94581c9061216ce0

  • SHA1

    2db78592abc453159936feec8ea590c026164d55

  • SHA256

    49135e08c9e18d9e47bbea3a12fcf14ccfd6a84e433388c0fcfe031a55c0f9b4

  • SHA512

    8058b11e5d46845a7c2634ca608a524762e9e0e3a71139fd55316436a4a7d6cc4f6dc9ec971dd79e93634439e26dac7e40e27c8a57c81647c415bf1dd3e0b1b8

  • SSDEEP

    12288:CdEVbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:iYvzecvsy

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d3c31ad06fc161cf94581c9061216ce0.exe

    • Size

      492KB

    • MD5

      d3c31ad06fc161cf94581c9061216ce0

    • SHA1

      2db78592abc453159936feec8ea590c026164d55

    • SHA256

      49135e08c9e18d9e47bbea3a12fcf14ccfd6a84e433388c0fcfe031a55c0f9b4

    • SHA512

      8058b11e5d46845a7c2634ca608a524762e9e0e3a71139fd55316436a4a7d6cc4f6dc9ec971dd79e93634439e26dac7e40e27c8a57c81647c415bf1dd3e0b1b8

    • SSDEEP

      12288:CdEVbWGRdA6sQhPbWGRdA6sQxuEuZH8bWGRdA6sQhPbWGRdA6sQyy:iYvzecvsy

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks