Overview

overview

10

Static

static

10

NEAS.f5c8a...25.exe

windows7-x64

10

NEAS.f5c8a...25.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f5c8abb6b108a68c620f1a2e51021125.exe

  • Size

    256KB

  • Sample

    231111-mkmdtadf2v

  • MD5

    f5c8abb6b108a68c620f1a2e51021125

  • SHA1

    be2ca37a4eb88dab4eb0129da7b0716ccf1bf282

  • SHA256

    200ec26b51c52ed3484451c8092bb779446b6602e6e41460d96632a8da66dc99

  • SHA512

    7b877eb789fe9ca4b8ccf0b1d4944b2d295857c7f00b5cf95bd8b82b400ac3e5e883fda934675dea537207c055450e114a2839be3b8a6b06aebc515da0aff8bc

  • SSDEEP

    6144:ObXyOq5PCQl6Wa4rQD85k/hQO+zrWnAdqjeOpKfduBU:ObCzrQg5W/+zrWAI5KFuU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f5c8abb6b108a68c620f1a2e51021125.exe

    • Size

      256KB

    • MD5

      f5c8abb6b108a68c620f1a2e51021125

    • SHA1

      be2ca37a4eb88dab4eb0129da7b0716ccf1bf282

    • SHA256

      200ec26b51c52ed3484451c8092bb779446b6602e6e41460d96632a8da66dc99

    • SHA512

      7b877eb789fe9ca4b8ccf0b1d4944b2d295857c7f00b5cf95bd8b82b400ac3e5e883fda934675dea537207c055450e114a2839be3b8a6b06aebc515da0aff8bc

    • SSDEEP

      6144:ObXyOq5PCQl6Wa4rQD85k/hQO+zrWnAdqjeOpKfduBU:ObCzrQg5W/+zrWAI5KFuU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks