Overview

overview

10

Static

static

10

NEAS.fc2ec...70.exe

windows7-x64

10

NEAS.fc2ec...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fc2ec33c6a534533453862a5fad6ba70.exe

  • Size

    407KB

  • Sample

    231102-vd4nhsec74

  • MD5

    fc2ec33c6a534533453862a5fad6ba70

  • SHA1

    49d3f00b299ca99380617fdf666617f7803f9820

  • SHA256

    36afdbce8ccb5006ff909e7790b10107c62032d276f6520474a1551ae7b35460

  • SHA512

    5ce86fe61e7640b6e38b4240dfa3ff0ab19a05e62afb33a2b3fa6b1303a5c957c29e372eba5bae88cbe7df4d0c5723983c48448758867e10d36738cbe7bf42b9

  • SSDEEP

    12288:oqzV/BJO/awrSmfyiPFg8prNdw+C7797TnPtLU8deJUP//zk9FGB:oqzdBJO/awrSmfyiPFg8prNdw+C7797b

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fc2ec33c6a534533453862a5fad6ba70.exe

    • Size

      407KB

    • MD5

      fc2ec33c6a534533453862a5fad6ba70

    • SHA1

      49d3f00b299ca99380617fdf666617f7803f9820

    • SHA256

      36afdbce8ccb5006ff909e7790b10107c62032d276f6520474a1551ae7b35460

    • SHA512

      5ce86fe61e7640b6e38b4240dfa3ff0ab19a05e62afb33a2b3fa6b1303a5c957c29e372eba5bae88cbe7df4d0c5723983c48448758867e10d36738cbe7bf42b9

    • SSDEEP

      12288:oqzV/BJO/awrSmfyiPFg8prNdw+C7797TnPtLU8deJUP//zk9FGB:oqzdBJO/awrSmfyiPFg8prNdw+C7797b

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks