Overview

overview

10

Static

static

10

NEAS.bce4c...90.exe

windows7-x64

10

NEAS.bce4c...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bce4cc51bfc89453e9cfc78c756a3090.exe

  • Size

    833KB

  • Sample

    231113-b6aflafc5v

  • MD5

    bce4cc51bfc89453e9cfc78c756a3090

  • SHA1

    3e88bf06fed5b2ed3cb7aa1da439cf75227aa994

  • SHA256

    a5bed3252523f370f4b079ec2e92bcc9a437e477ba786990ffe9e71b6b070062

  • SHA512

    70098077d23f255e7f7f2f57237377bf425a11582500c107f2d0aab2585c0514778ac999c645b3882a68260a239025aa8f2a6c08e9eac0bbe0317868676cc05a

  • SSDEEP

    24576:rGbdXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:6dXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bce4cc51bfc89453e9cfc78c756a3090.exe

    • Size

      833KB

    • MD5

      bce4cc51bfc89453e9cfc78c756a3090

    • SHA1

      3e88bf06fed5b2ed3cb7aa1da439cf75227aa994

    • SHA256

      a5bed3252523f370f4b079ec2e92bcc9a437e477ba786990ffe9e71b6b070062

    • SHA512

      70098077d23f255e7f7f2f57237377bf425a11582500c107f2d0aab2585c0514778ac999c645b3882a68260a239025aa8f2a6c08e9eac0bbe0317868676cc05a

    • SSDEEP

      24576:rGbdXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:6dXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks