Overview

overview

10

Static

static

10

NEAS.5200c...39.exe

windows7-x64

NEAS.5200c...39.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5200cfa38255cbeffced7de7e2fb3239.exe

  • Size

    346KB

  • Sample

    231111-nfnlraec8w

  • MD5

    5200cfa38255cbeffced7de7e2fb3239

  • SHA1

    2c5d5ddb1268afda234648f36abf8235be77a13d

  • SHA256

    266bc3d26ab5c845524b8b11af269b23464b49ec64dc597a66b5bf7948a27403

  • SHA512

    c7125e59fefe09cdd3dd6c6269e0e28a651d5ec6d9d5a6a090d4717ce7f68e282ed82c5c6b450936c15375841ea45ad8373e6ad43dc400821234ceeefadcabb8

  • SSDEEP

    6144:M9lv91yfhdsFj5t13LJhrmMsFj5tzOvfFOM6:M9lv91Ghds15tFrls15tz4FT6

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.5200cfa38255cbeffced7de7e2fb3239.exe

    • Size

      346KB

    • MD5

      5200cfa38255cbeffced7de7e2fb3239

    • SHA1

      2c5d5ddb1268afda234648f36abf8235be77a13d

    • SHA256

      266bc3d26ab5c845524b8b11af269b23464b49ec64dc597a66b5bf7948a27403

    • SHA512

      c7125e59fefe09cdd3dd6c6269e0e28a651d5ec6d9d5a6a090d4717ce7f68e282ed82c5c6b450936c15375841ea45ad8373e6ad43dc400821234ceeefadcabb8

    • SSDEEP

      6144:M9lv91yfhdsFj5t13LJhrmMsFj5tzOvfFOM6:M9lv91Ghds15tFrls15tz4FT6

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks