Overview

overview

10

Static

static

10

NEAS.0c452...10.exe

windows7-x64

10

NEAS.0c452...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0c4524d51eb025dcfa2ae3713b60b510.exe

  • Size

    240KB

  • Sample

    231111-gc9w9acg87

  • MD5

    0c4524d51eb025dcfa2ae3713b60b510

  • SHA1

    727d64264d462c0957957f74d73e80e9d48b8e11

  • SHA256

    f448666d597a3f7a141161617d304c166b5aeb8b95f33856542bfb42608523af

  • SHA512

    56cd28c0636079f2888770a8b04d1a82b29e948bcd91af2f31534facc0c27ccb4216cea24615da9080ed13c48d9b596f899f14cde8e4a5368476d7c758415039

  • SSDEEP

    6144:/zYDkcYMoEEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:Eg3EtycSly8DSUA1YHVD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0c4524d51eb025dcfa2ae3713b60b510.exe

    • Size

      240KB

    • MD5

      0c4524d51eb025dcfa2ae3713b60b510

    • SHA1

      727d64264d462c0957957f74d73e80e9d48b8e11

    • SHA256

      f448666d597a3f7a141161617d304c166b5aeb8b95f33856542bfb42608523af

    • SHA512

      56cd28c0636079f2888770a8b04d1a82b29e948bcd91af2f31534facc0c27ccb4216cea24615da9080ed13c48d9b596f899f14cde8e4a5368476d7c758415039

    • SSDEEP

      6144:/zYDkcYMoEEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:Eg3EtycSly8DSUA1YHVD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks