Overview

overview

10

Static

static

10

NEAS.dce0c...d0.exe

windows7-x64

10

NEAS.dce0c...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.dce0c3479e67fccc43a4c1d074e6f7d0.exe

  • Size

    82KB

  • Sample

    231118-fzcplabf37

  • MD5

    dce0c3479e67fccc43a4c1d074e6f7d0

  • SHA1

    bb3d4bb29400891d28815b78cd637c44fd32c6f6

  • SHA256

    8000e499b9a0e9c121c60119ce80c797a272ba8aea6ba2dd597abf9f844ae611

  • SHA512

    e24d4c5ab89b593480d499797901afd9b72d685dad9a9df91a4d21b51a7e6b8f653dbc21e9b73fd8be6270cbce11fb7d9ee17b99a688ec3e0cc0782d9e3c58bd

  • SSDEEP

    1536:fEm6LVWhYeMb0XCMjFwodU82L7ypm6+wDSmQFN6TiN1sJtvQu:cxshBSUaoyupm6tm7N6TO1SpD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dce0c3479e67fccc43a4c1d074e6f7d0.exe

    • Size

      82KB

    • MD5

      dce0c3479e67fccc43a4c1d074e6f7d0

    • SHA1

      bb3d4bb29400891d28815b78cd637c44fd32c6f6

    • SHA256

      8000e499b9a0e9c121c60119ce80c797a272ba8aea6ba2dd597abf9f844ae611

    • SHA512

      e24d4c5ab89b593480d499797901afd9b72d685dad9a9df91a4d21b51a7e6b8f653dbc21e9b73fd8be6270cbce11fb7d9ee17b99a688ec3e0cc0782d9e3c58bd

    • SSDEEP

      1536:fEm6LVWhYeMb0XCMjFwodU82L7ypm6+wDSmQFN6TiN1sJtvQu:cxshBSUaoyupm6tm7N6TO1SpD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks