Overview

overview

10

Static

static

10

NEAS.4c5d2...d0.exe

windows7-x64

10

NEAS.4c5d2...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4c5d2055d0c3cbb2c97921e0b4e60dd0.exe

  • Size

    77KB

  • Sample

    231103-p5pqsach67

  • MD5

    4c5d2055d0c3cbb2c97921e0b4e60dd0

  • SHA1

    e0039691884ddb3e11ecfdb87f02761d3baff694

  • SHA256

    89945d69f0e52885fd56a8b391f0de5396bb0e037e5a10aca7f627b529b310ca

  • SHA512

    61234826c07c17e135ae45a20d0f0664461b88d212e0e108b521de2e01cc751cac41f97e2499897e4dd19711c994ed089b1b36cd12bf752fac1526c04af1ff0a

  • SSDEEP

    1536:qOdgOn8bZhAImExRUQhx0RJ/1422LtWwfi+TjRC/D:qOYbZvTzbI5uowf1TjYD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4c5d2055d0c3cbb2c97921e0b4e60dd0.exe

    • Size

      77KB

    • MD5

      4c5d2055d0c3cbb2c97921e0b4e60dd0

    • SHA1

      e0039691884ddb3e11ecfdb87f02761d3baff694

    • SHA256

      89945d69f0e52885fd56a8b391f0de5396bb0e037e5a10aca7f627b529b310ca

    • SHA512

      61234826c07c17e135ae45a20d0f0664461b88d212e0e108b521de2e01cc751cac41f97e2499897e4dd19711c994ed089b1b36cd12bf752fac1526c04af1ff0a

    • SSDEEP

      1536:qOdgOn8bZhAImExRUQhx0RJ/1422LtWwfi+TjRC/D:qOYbZvTzbI5uowf1TjYD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks