Overview

overview

10

Static

static

10

NEAS.afafe...e0.exe

windows7-x64

10

NEAS.afafe...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.afafe9d31ea7c63473fa606fd51223e0.exe

  • Size

    347KB

  • Sample

    231021-1by8xaaa88

  • MD5

    afafe9d31ea7c63473fa606fd51223e0

  • SHA1

    241fc70a7f7616e60e78f73e32c9023f73e73f3a

  • SHA256

    a086acfe4a533b9f52abb00b5bbc20888ff1ea752a81180b2f6ad9fdba5d2a6e

  • SHA512

    4ae7b70fbcb1dab02a70a4fa462e96acf9b3588b1b9f899e24d8ffd6bd2fa8cb2d65e2b27d535664bd8f288f8bea91b3f7b0080ff2417098656d4020abad86fa

  • SSDEEP

    6144:Lc+NVg1WreXYsrwjBkb4jwQrd2VDkN3LJ7szXLkCEf7P13eJEzdqnZ2sdOUVq9Pk:4+KVY+wi8XrMRkN3L54XLEfLo0dqnZ2G

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.afafe9d31ea7c63473fa606fd51223e0.exe

    • Size

      347KB

    • MD5

      afafe9d31ea7c63473fa606fd51223e0

    • SHA1

      241fc70a7f7616e60e78f73e32c9023f73e73f3a

    • SHA256

      a086acfe4a533b9f52abb00b5bbc20888ff1ea752a81180b2f6ad9fdba5d2a6e

    • SHA512

      4ae7b70fbcb1dab02a70a4fa462e96acf9b3588b1b9f899e24d8ffd6bd2fa8cb2d65e2b27d535664bd8f288f8bea91b3f7b0080ff2417098656d4020abad86fa

    • SSDEEP

      6144:Lc+NVg1WreXYsrwjBkb4jwQrd2VDkN3LJ7szXLkCEf7P13eJEzdqnZ2sdOUVq9Pk:4+KVY+wi8XrMRkN3L54XLEfLo0dqnZ2G

    Score
    10/10
    dropperpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Deletes itself

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks