Overview

overview

10

Static

static

10

NEAS.cc2af...90.exe

windows7-x64

10

NEAS.cc2af...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.cc2af71263216ddff7122f84316d1c90.exe

  • Size

    3.2MB

  • Sample

    231117-de7m5afa5w

  • MD5

    cc2af71263216ddff7122f84316d1c90

  • SHA1

    8cc03eac19c4b13d8171ecbc7d1bedeeee5f0e5f

  • SHA256

    54dcd4ca9580d204de872f857f4f63e465b9f2b7a6faf9ead1db75c4821bdf37

  • SHA512

    38adf5358290ad9f43cf30462e997860bd327b094d13ea1180c2d500784cff27dd17324a816caa04556c09bf537c49a19b39075a365ee3486297b60457ad1939

  • SSDEEP

    98304:jlBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NTPKnllYUugy:jlBFLPj3JStuv40ar7zrbDlsa2VIlPW+

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cc2af71263216ddff7122f84316d1c90.exe

    • Size

      3.2MB

    • MD5

      cc2af71263216ddff7122f84316d1c90

    • SHA1

      8cc03eac19c4b13d8171ecbc7d1bedeeee5f0e5f

    • SHA256

      54dcd4ca9580d204de872f857f4f63e465b9f2b7a6faf9ead1db75c4821bdf37

    • SHA512

      38adf5358290ad9f43cf30462e997860bd327b094d13ea1180c2d500784cff27dd17324a816caa04556c09bf537c49a19b39075a365ee3486297b60457ad1939

    • SSDEEP

      98304:jlBFLPj3JStuv40ar7zrbDlsa2VIlPWYv1NTPKnllYUugy:jlBFLPj3JStuv40ar7zrbDlsa2VIlPW+

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks