Overview

overview

10

Static

static

10

NEAS.e1821...80.exe

windows7-x64

10

NEAS.e1821...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e182171bd42396e3db90d0e1bb50ab80.exe

  • Size

    107KB

  • Sample

    231021-1e9ttacd74

  • MD5

    e182171bd42396e3db90d0e1bb50ab80

  • SHA1

    37d1af22181897c02f84fd7c66b4d6f6d0a9e7ed

  • SHA256

    5cafd301ec8b8bf0100e04b9cab0cdf10c7aa0c4b6be865eeae305893351bf74

  • SHA512

    eeeec46f6ba25b89b0534a499ec1b4d6ce4765c5eec9c4529dacd8e5b6488ab99c1680bf65f85b070a5784cbcbc5610f8a53cef31ed16a9b75aa4fe15a1062b6

  • SSDEEP

    1536:aAmWeouy0y6j85jH6r5JrOL02LjaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:arW2y0V6H6FhOLNjaMU7uihJ5233y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e182171bd42396e3db90d0e1bb50ab80.exe

    • Size

      107KB

    • MD5

      e182171bd42396e3db90d0e1bb50ab80

    • SHA1

      37d1af22181897c02f84fd7c66b4d6f6d0a9e7ed

    • SHA256

      5cafd301ec8b8bf0100e04b9cab0cdf10c7aa0c4b6be865eeae305893351bf74

    • SHA512

      eeeec46f6ba25b89b0534a499ec1b4d6ce4765c5eec9c4529dacd8e5b6488ab99c1680bf65f85b070a5784cbcbc5610f8a53cef31ed16a9b75aa4fe15a1062b6

    • SSDEEP

      1536:aAmWeouy0y6j85jH6r5JrOL02LjaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:arW2y0V6H6FhOLNjaMU7uihJ5233y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks