Overview

overview

10

Static

static

10

NEAS.fb625...80.exe

windows7-x64

10

NEAS.fb625...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fb62540317c6aa4d1d19c2b5fa805d80.exe

  • Size

    697KB

  • Sample

    231112-3cvyzseb75

  • MD5

    fb62540317c6aa4d1d19c2b5fa805d80

  • SHA1

    dc883134ad62b128e7c123c9cfdd958df7ed9bff

  • SHA256

    a2fb1c258832c11f50f6e9e55b40669f34163e837cf71508bee3277e6ff9c2ce

  • SHA512

    d45c37d94cf98ed9b3e2da9f8b3b809c7c222799cf0b979d5dadb56bcf8d08d64f76209917383a9f80912f06a67c19676b5e1ce0fbad5b067ae244db99c9f21a

  • SSDEEP

    12288:lSa8nrEz1MSHMUJpTZ2KLP+/SRERnnwNqQ8dGx//DuVTkw1gMyfiEl:lwnrAW+MUJV1j+/S2RnUR8dGx//DuVTY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fb62540317c6aa4d1d19c2b5fa805d80.exe

    • Size

      697KB

    • MD5

      fb62540317c6aa4d1d19c2b5fa805d80

    • SHA1

      dc883134ad62b128e7c123c9cfdd958df7ed9bff

    • SHA256

      a2fb1c258832c11f50f6e9e55b40669f34163e837cf71508bee3277e6ff9c2ce

    • SHA512

      d45c37d94cf98ed9b3e2da9f8b3b809c7c222799cf0b979d5dadb56bcf8d08d64f76209917383a9f80912f06a67c19676b5e1ce0fbad5b067ae244db99c9f21a

    • SSDEEP

      12288:lSa8nrEz1MSHMUJpTZ2KLP+/SRERnnwNqQ8dGx//DuVTkw1gMyfiEl:lwnrAW+MUJV1j+/S2RnUR8dGx//DuVTY

    Score
    10/10
    dropperpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks