Overview

overview

10

Static

static

10

NEAS.69fc5...f0.exe

windows7-x64

10

NEAS.69fc5...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.69fc51ecadca5e21b704b0c6b91ce9f0.exe

  • Size

    349KB

  • Sample

    231105-28gwkafh47

  • MD5

    69fc51ecadca5e21b704b0c6b91ce9f0

  • SHA1

    bbdda852a7555d637c6b774a7413d78d8f097636

  • SHA256

    98b8be041e9425dc18b877d7c538d924e57444b84c550a3ed82064ad44723ead

  • SHA512

    b1b4ae2a70cca2a35353780562805f6ea654eb43b93470bcbee3623a4b3b4b32e4cfe9ede4dcef26840a9260a521a3cec84309b11a6e290fdd07e359f4a50dca

  • SSDEEP

    3072:+YUb5QoJ4g+CLi8HSpmWAVW9UNpZj6Iz1ZdW4SrO7FSVpEv4wD66ibO:+YwLTNV97h6SZI4z7FSVp84+26

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.69fc51ecadca5e21b704b0c6b91ce9f0.exe

    • Size

      349KB

    • MD5

      69fc51ecadca5e21b704b0c6b91ce9f0

    • SHA1

      bbdda852a7555d637c6b774a7413d78d8f097636

    • SHA256

      98b8be041e9425dc18b877d7c538d924e57444b84c550a3ed82064ad44723ead

    • SHA512

      b1b4ae2a70cca2a35353780562805f6ea654eb43b93470bcbee3623a4b3b4b32e4cfe9ede4dcef26840a9260a521a3cec84309b11a6e290fdd07e359f4a50dca

    • SSDEEP

      3072:+YUb5QoJ4g+CLi8HSpmWAVW9UNpZj6Iz1ZdW4SrO7FSVpEv4wD66ibO:+YwLTNV97h6SZI4z7FSVp84+26

    Score
    10/10
    dropperpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks