Overview

overview

10

Static

static

10

NEAS.1c538...80.exe

windows7-x64

10

NEAS.1c538...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1c538ca4852a4d57f381ed3c38302180.exe

  • Size

    368KB

  • Sample

    231112-l1vjpafe42

  • MD5

    1c538ca4852a4d57f381ed3c38302180

  • SHA1

    540971138f58ad40ffd65ed77c90c0b61db96daf

  • SHA256

    d31f954f20999cf0d1872ff1c5469e2ca47774136ce8465a7f5eb1e7faae35dc

  • SHA512

    99701918feeda5194ec517bbb7495945142b129fa28de343c12264569b87b4b2b603b9a5388364fed90eb438232019cc5a1ee74318bfac4f82e5cc81fd4a207b

  • SSDEEP

    6144:t18a6dLBDshE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJfTo9t:tGa6dtDdaAD6RrI1+lDMEAD6Rr2NWL

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.1c538ca4852a4d57f381ed3c38302180.exe

    • Size

      368KB

    • MD5

      1c538ca4852a4d57f381ed3c38302180

    • SHA1

      540971138f58ad40ffd65ed77c90c0b61db96daf

    • SHA256

      d31f954f20999cf0d1872ff1c5469e2ca47774136ce8465a7f5eb1e7faae35dc

    • SHA512

      99701918feeda5194ec517bbb7495945142b129fa28de343c12264569b87b4b2b603b9a5388364fed90eb438232019cc5a1ee74318bfac4f82e5cc81fd4a207b

    • SSDEEP

      6144:t18a6dLBDshE4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJfTo9t:tGa6dtDdaAD6RrI1+lDMEAD6Rr2NWL

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks