Overview

overview

10

Static

static

10

NEAS.a54ca...30.exe

windows7-x64

NEAS.a54ca...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a54ca0243694392c200f63b45d3f1c30.exe

  • Size

    109KB

  • Sample

    231021-1bdbfafh6y

  • MD5

    a54ca0243694392c200f63b45d3f1c30

  • SHA1

    e64908eef5384534f4b668bcd452b8eb9d4998d0

  • SHA256

    e48ca5aca3e151918f40c1f773c82c65a61a7b2450aef5bb05db14066dd64039

  • SHA512

    df46de245e14c889c1d868a95f22b90334d5c072aec9bd13812ba41ac1d9fb34c152e4e02e298a6bd4b3cf34c3583420ce3d0751bdde8a840c97ee29521aba93

  • SSDEEP

    3072:6qkPd3J359/UXIGrTLGqMpr5stMJ9RLCqwzBu1DjHLMVDqqkSpR:6qa3J3PMIQ+qMl53J95wtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a54ca0243694392c200f63b45d3f1c30.exe

    • Size

      109KB

    • MD5

      a54ca0243694392c200f63b45d3f1c30

    • SHA1

      e64908eef5384534f4b668bcd452b8eb9d4998d0

    • SHA256

      e48ca5aca3e151918f40c1f773c82c65a61a7b2450aef5bb05db14066dd64039

    • SHA512

      df46de245e14c889c1d868a95f22b90334d5c072aec9bd13812ba41ac1d9fb34c152e4e02e298a6bd4b3cf34c3583420ce3d0751bdde8a840c97ee29521aba93

    • SSDEEP

      3072:6qkPd3J359/UXIGrTLGqMpr5stMJ9RLCqwzBu1DjHLMVDqqkSpR:6qa3J3PMIQ+qMl53J95wtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks