Overview

overview

10

Static

static

10

NEAS.fc6fa...30.exe

windows7-x64

10

NEAS.fc6fa...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.fc6faca64ea2248148a23186a049fd30.exe

  • Size

    135KB

  • Sample

    231115-ecfbjabf77

  • MD5

    fc6faca64ea2248148a23186a049fd30

  • SHA1

    9d097b504414e38b45d134c6140ce3d1ee59b511

  • SHA256

    4936577dcc147ee843b22bd6369707e35908762e6bde20835a1a4b42e2cfb57b

  • SHA512

    535312d488a02e8f5791d15f3d7c24d4fa896c5fb739dc0c79dab803f1818f4dec118b7f4b57a686fad75f51d7a1f5edf710dca2af745d53039a6ef7ce793a3d

  • SSDEEP

    3072:ZBRuyDMGrNmnkSS9gTAwK8Qr5+ViKGe7Yfs0a0Uoi:Zr3VRmkSSWTbK9cViK4fs0l

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fc6faca64ea2248148a23186a049fd30.exe

    • Size

      135KB

    • MD5

      fc6faca64ea2248148a23186a049fd30

    • SHA1

      9d097b504414e38b45d134c6140ce3d1ee59b511

    • SHA256

      4936577dcc147ee843b22bd6369707e35908762e6bde20835a1a4b42e2cfb57b

    • SHA512

      535312d488a02e8f5791d15f3d7c24d4fa896c5fb739dc0c79dab803f1818f4dec118b7f4b57a686fad75f51d7a1f5edf710dca2af745d53039a6ef7ce793a3d

    • SSDEEP

      3072:ZBRuyDMGrNmnkSS9gTAwK8Qr5+ViKGe7Yfs0a0Uoi:Zr3VRmkSSWTbK9cViK4fs0l

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks