Overview

overview

10

Static

static

10

NEAS.0ca24...1c.exe

windows7-x64

10

NEAS.0ca24...1c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0ca24de21c7d6935f8ac6b3d7cfc501c.exe

  • Size

    704KB

  • Sample

    231114-lyhgcaba3y

  • MD5

    0ca24de21c7d6935f8ac6b3d7cfc501c

  • SHA1

    8ad683ef50e48ea4ca13af25e347f5e6ebf39a80

  • SHA256

    268d708af7dda0f6a073dded17212fd91a9ced78ab9c44d8a6a458f8c72fc8a0

  • SHA512

    f6b489286a716600f060cc80aaf413f4703322e9a87e61e9fb266c7edd29e24dc9d3c8a7e2ed4a729594529e021794b3157bff882b1ad050429a18d7d67f6c9f

  • SSDEEP

    12288:QpqKrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:QNrQg5Wm0BmmvFimm0MTP7hm0b

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0ca24de21c7d6935f8ac6b3d7cfc501c.exe

    • Size

      704KB

    • MD5

      0ca24de21c7d6935f8ac6b3d7cfc501c

    • SHA1

      8ad683ef50e48ea4ca13af25e347f5e6ebf39a80

    • SHA256

      268d708af7dda0f6a073dded17212fd91a9ced78ab9c44d8a6a458f8c72fc8a0

    • SHA512

      f6b489286a716600f060cc80aaf413f4703322e9a87e61e9fb266c7edd29e24dc9d3c8a7e2ed4a729594529e021794b3157bff882b1ad050429a18d7d67f6c9f

    • SSDEEP

      12288:QpqKrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:QNrQg5Wm0BmmvFimm0MTP7hm0b

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks