Overview

overview

10

Static

static

10

NEAS.0c88c...e0.exe

windows7-x64

10

NEAS.0c88c...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0c88c1791cf7d716abfc3dfb22406de0.exe

  • Size

    8.4MB

  • Sample

    231116-lmfhlsba61

  • MD5

    0c88c1791cf7d716abfc3dfb22406de0

  • SHA1

    a1431fda97bc12b9e1f89918dfc7e9f70aae2183

  • SHA256

    d332dd0f119ba4bebf6c283bd372f1c7fc4c9390421c3894694199d7a02e169c

  • SHA512

    85cf6dabe4200280351b3461aa4dafa6a1f1f8041042819e86a02cf0da27fbf4a713b1cb3a566c5e44230634276b0717208a7354cf18fc4460759698334a6f43

  • SSDEEP

    196608:FaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:FaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0c88c1791cf7d716abfc3dfb22406de0.exe

    • Size

      8.4MB

    • MD5

      0c88c1791cf7d716abfc3dfb22406de0

    • SHA1

      a1431fda97bc12b9e1f89918dfc7e9f70aae2183

    • SHA256

      d332dd0f119ba4bebf6c283bd372f1c7fc4c9390421c3894694199d7a02e169c

    • SHA512

      85cf6dabe4200280351b3461aa4dafa6a1f1f8041042819e86a02cf0da27fbf4a713b1cb3a566c5e44230634276b0717208a7354cf18fc4460759698334a6f43

    • SSDEEP

      196608:FaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:FaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks