Overview

overview

10

Static

static

10

NEAS.c4588...30.exe

windows7-x64

10

NEAS.c4588...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c45882301a1c0392954ac83c15665430.exe

  • Size

    450KB

  • Sample

    231118-elpassbf9t

  • MD5

    c45882301a1c0392954ac83c15665430

  • SHA1

    3a525d8c6b03249e86a28010a4c92b808c6349a0

  • SHA256

    6578a351c0b9979849e99f03d602274fd7584cc2591b129f82779e26961bad19

  • SHA512

    fe878a3923405385b6f93f34a4a5c6b552212d8ec84ce2178b4d6229682fd22c59aa33b954231b8d4ca8ab1ee6eaa45d6ba97041a70cefb6ac826b2302147d9a

  • SSDEEP

    12288:VpHsvwjXFC9m7ufXFC9xfIkMuXFC9m7ufXFC9Wm:okc9Iufc9xsuc9Iufc9Wm

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c45882301a1c0392954ac83c15665430.exe

    • Size

      450KB

    • MD5

      c45882301a1c0392954ac83c15665430

    • SHA1

      3a525d8c6b03249e86a28010a4c92b808c6349a0

    • SHA256

      6578a351c0b9979849e99f03d602274fd7584cc2591b129f82779e26961bad19

    • SHA512

      fe878a3923405385b6f93f34a4a5c6b552212d8ec84ce2178b4d6229682fd22c59aa33b954231b8d4ca8ab1ee6eaa45d6ba97041a70cefb6ac826b2302147d9a

    • SSDEEP

      12288:VpHsvwjXFC9m7ufXFC9xfIkMuXFC9m7ufXFC9Wm:okc9Iufc9xsuc9Iufc9Wm

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks