Overview

overview

10

Static

static

10

NEAS.e24cc...b0.exe

windows7-x64

10

NEAS.e24cc...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e24ccba8018cf1ce1ba5ebb688fb9ab0.exe

  • Size

    345KB

  • Sample

    231021-1fbcmsaf9s

  • MD5

    e24ccba8018cf1ce1ba5ebb688fb9ab0

  • SHA1

    aa99b54c4b14ef67be8e863447570906b2cd994a

  • SHA256

    eefeaee160a9b928c764958de7fb67368616a594785c7641d95b79635e2413a8

  • SHA512

    5312e3857ab16fe7a93f1cab6f1370f4aca0585fd288684caf7d3f7af529cf4e56f57d47a48cd8244f2bf572cf8fbb6bd326180a26997c71ee1465f88e71dbe8

  • SSDEEP

    6144:c9ZMonMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:PA1uznghoaHACwBkka8eGp7dPRr6aeKr

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e24ccba8018cf1ce1ba5ebb688fb9ab0.exe

    • Size

      345KB

    • MD5

      e24ccba8018cf1ce1ba5ebb688fb9ab0

    • SHA1

      aa99b54c4b14ef67be8e863447570906b2cd994a

    • SHA256

      eefeaee160a9b928c764958de7fb67368616a594785c7641d95b79635e2413a8

    • SHA512

      5312e3857ab16fe7a93f1cab6f1370f4aca0585fd288684caf7d3f7af529cf4e56f57d47a48cd8244f2bf572cf8fbb6bd326180a26997c71ee1465f88e71dbe8

    • SSDEEP

      6144:c9ZMonMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:PA1uznghoaHACwBkka8eGp7dPRr6aeKr

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks