Overview

overview

10

Static

static

10

NEAS.ac0fc...35.exe

windows7-x64

10

NEAS.ac0fc...35.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ac0fcd4d71bab8d1e0ebf6f74bca7135.exe

  • Size

    199KB

  • Sample

    231112-vyzkashd7v

  • MD5

    ac0fcd4d71bab8d1e0ebf6f74bca7135

  • SHA1

    befa427b3f4e618d2571f29fb7020a979fab7c1c

  • SHA256

    8fca1a1c6b8d91358413c660def4c4fd99225b159f0e80e4bfaf35a54405cd64

  • SHA512

    9f3412b8e1934f17900dd3591b2a04b99c97b7f749654d36b0354fcec4b21c2948b8f753ff3c8a4e369fa43cc761448f51c2e37fcbff8049ab5a0a0f24085348

  • SSDEEP

    6144:rmEX/uk0ESZSCZj81+jq4peBK034YOmFz1h:d/JuZSCG1+jheBbOmFxh

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ac0fcd4d71bab8d1e0ebf6f74bca7135.exe

    • Size

      199KB

    • MD5

      ac0fcd4d71bab8d1e0ebf6f74bca7135

    • SHA1

      befa427b3f4e618d2571f29fb7020a979fab7c1c

    • SHA256

      8fca1a1c6b8d91358413c660def4c4fd99225b159f0e80e4bfaf35a54405cd64

    • SHA512

      9f3412b8e1934f17900dd3591b2a04b99c97b7f749654d36b0354fcec4b21c2948b8f753ff3c8a4e369fa43cc761448f51c2e37fcbff8049ab5a0a0f24085348

    • SSDEEP

      6144:rmEX/uk0ESZSCZj81+jq4peBK034YOmFz1h:d/JuZSCG1+jheBbOmFxh

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks