Overview

overview

10

Static

static

10

NEAS.bc360...c0.exe

windows7-x64

10

NEAS.bc360...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bc360a8b7086a3785a3118211749f2c0.exe

  • Size

    240KB

  • Sample

    231107-xcxjxseh83

  • MD5

    bc360a8b7086a3785a3118211749f2c0

  • SHA1

    aa88032a6503b28d22bb674cf47d1cd779878070

  • SHA256

    dde976b0c721381807ba7e9028f6a46f7076a6be5bbf0efa8034723b92997bce

  • SHA512

    d567db6defa2fbf84488dc102b2cfe23d7d18473280014294338db3d85121d6f09c72d8ba06f9dc173e3bf31aab38c02cd3a01ae657875f2636980aa59e37c86

  • SSDEEP

    6144:W5AWcuxDoBEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:W53+BtycSly8DSUA1YHVD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bc360a8b7086a3785a3118211749f2c0.exe

    • Size

      240KB

    • MD5

      bc360a8b7086a3785a3118211749f2c0

    • SHA1

      aa88032a6503b28d22bb674cf47d1cd779878070

    • SHA256

      dde976b0c721381807ba7e9028f6a46f7076a6be5bbf0efa8034723b92997bce

    • SHA512

      d567db6defa2fbf84488dc102b2cfe23d7d18473280014294338db3d85121d6f09c72d8ba06f9dc173e3bf31aab38c02cd3a01ae657875f2636980aa59e37c86

    • SSDEEP

      6144:W5AWcuxDoBEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:W53+BtycSly8DSUA1YHVD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks