Overview

overview

10

Static

static

10

NEAS.fc527...00.exe

windows7-x64

10

NEAS.fc527...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fc52777d8c82a4b3818ee880eedf5500.exe

  • Size

    141KB

  • Sample

    231117-bzmscaea9w

  • MD5

    fc52777d8c82a4b3818ee880eedf5500

  • SHA1

    57a2bb3a54d99982479173abb2f5d2878cab2ba6

  • SHA256

    524d9e60f88a9e8a2a0e8f0d707e43f987945e94b7b65725e5bf3ef265be616b

  • SHA512

    07e4521430f3de82f2a32143144ae5bebb3053a4533f72ce5313288ebc9f79efcd8211612e3e973abdf5dd7dce80337487b99abdb07c0f310af9261d9e215fb6

  • SSDEEP

    3072:pHL/nN3LfhmcvNFUwQ9bGCmBJFWpoPSkGFj/p7sW0l:RLndLNFUN9bGCKJFtE/JK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fc52777d8c82a4b3818ee880eedf5500.exe

    • Size

      141KB

    • MD5

      fc52777d8c82a4b3818ee880eedf5500

    • SHA1

      57a2bb3a54d99982479173abb2f5d2878cab2ba6

    • SHA256

      524d9e60f88a9e8a2a0e8f0d707e43f987945e94b7b65725e5bf3ef265be616b

    • SHA512

      07e4521430f3de82f2a32143144ae5bebb3053a4533f72ce5313288ebc9f79efcd8211612e3e973abdf5dd7dce80337487b99abdb07c0f310af9261d9e215fb6

    • SSDEEP

      3072:pHL/nN3LfhmcvNFUwQ9bGCmBJFWpoPSkGFj/p7sW0l:RLndLNFUN9bGCKJFtE/JK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks