Overview

overview

10

Static

static

10

NEAS.bcb6a...f0.exe

windows7-x64

10

NEAS.bcb6a...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bcb6afd8696026d534971cb9168c99f0.exe

  • Size

    465KB

  • Sample

    231113-f7avzahh8s

  • MD5

    bcb6afd8696026d534971cb9168c99f0

  • SHA1

    c4d302eed95d205262d876d540e71547f130fab0

  • SHA256

    49d1421cd0a35de24681e396ad4da4048694b63f6f44548cd6a7c11f9fa06261

  • SHA512

    a5965e0b1c96de06bde99d4af658efc3a8e1a33b31f12840bc275405a3af2ab350cb138c66e5bf8c7b5c5b885ba3e76bec58e27d100ca5f487ab3d5d2cde06ee

  • SSDEEP

    12288:DOoZxcL7XYYfITdjQPBvU35t6NSN6G5tP6sus5t6NSN6G5tooQ:CfydjQPBvUWc6vc6XoQ

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bcb6afd8696026d534971cb9168c99f0.exe

    • Size

      465KB

    • MD5

      bcb6afd8696026d534971cb9168c99f0

    • SHA1

      c4d302eed95d205262d876d540e71547f130fab0

    • SHA256

      49d1421cd0a35de24681e396ad4da4048694b63f6f44548cd6a7c11f9fa06261

    • SHA512

      a5965e0b1c96de06bde99d4af658efc3a8e1a33b31f12840bc275405a3af2ab350cb138c66e5bf8c7b5c5b885ba3e76bec58e27d100ca5f487ab3d5d2cde06ee

    • SSDEEP

      12288:DOoZxcL7XYYfITdjQPBvU35t6NSN6G5tP6sus5t6NSN6G5tooQ:CfydjQPBvUWc6vc6XoQ

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks