Overview

overview

10

Static

static

10

NEAS.c0f82...a0.exe

windows7-x64

10

NEAS.c0f82...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.c0f8298fa16d400e5e0cb36feb8830a0.exe

  • Size

    226KB

  • Sample

    231105-x6xrsaba8v

  • MD5

    c0f8298fa16d400e5e0cb36feb8830a0

  • SHA1

    2c0083ee0214b0897fa8622ee0e54fb4406a90d0

  • SHA256

    e54aa6a2d86b75b631f2f10abafa557a3126443de613fabebb7cbd0c24d7edcb

  • SHA512

    6327cfcf8e71c2a1c11d848a261808ede01e9e749dc7d5ba9f1efdfb57e6b5a26b2e9615323f3a32ee2ed508bdc94bb2b80b0228c63f7a264981f5bfa3d09dd5

  • SSDEEP

    6144:ARk3KM86AFXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:ARR96A5IKrEAlnLAg

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c0f8298fa16d400e5e0cb36feb8830a0.exe

    • Size

      226KB

    • MD5

      c0f8298fa16d400e5e0cb36feb8830a0

    • SHA1

      2c0083ee0214b0897fa8622ee0e54fb4406a90d0

    • SHA256

      e54aa6a2d86b75b631f2f10abafa557a3126443de613fabebb7cbd0c24d7edcb

    • SHA512

      6327cfcf8e71c2a1c11d848a261808ede01e9e749dc7d5ba9f1efdfb57e6b5a26b2e9615323f3a32ee2ed508bdc94bb2b80b0228c63f7a264981f5bfa3d09dd5

    • SSDEEP

      6144:ARk3KM86AFXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:ARR96A5IKrEAlnLAg

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks