Overview

overview

10

Static

static

10

NEAS.e3ef9...b0.exe

windows7-x64

10

NEAS.e3ef9...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e3ef92e482e18a76c8c4825200aca9b0.exe

  • Size

    300KB

  • Sample

    231021-1fgvesag7y

  • MD5

    e3ef92e482e18a76c8c4825200aca9b0

  • SHA1

    45e82094465a3bb6378e7786cbfb3b653564c412

  • SHA256

    a745e724d3ad6294972506b8d16bf4504de390609662a2c20e83ddcee8d5819a

  • SHA512

    3ecc4ec95160d2d56cc6295a482ba97612f4cc95b97c3874298f8e827bb12f97eb35c5229b65f9fca1db04be3be14044ecffe5b660aa761dfeb1f44c50625a28

  • SSDEEP

    6144:8NDe2/vrQHtohIhqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:C64vrQoMymCjb87g4/c

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e3ef92e482e18a76c8c4825200aca9b0.exe

    • Size

      300KB

    • MD5

      e3ef92e482e18a76c8c4825200aca9b0

    • SHA1

      45e82094465a3bb6378e7786cbfb3b653564c412

    • SHA256

      a745e724d3ad6294972506b8d16bf4504de390609662a2c20e83ddcee8d5819a

    • SHA512

      3ecc4ec95160d2d56cc6295a482ba97612f4cc95b97c3874298f8e827bb12f97eb35c5229b65f9fca1db04be3be14044ecffe5b660aa761dfeb1f44c50625a28

    • SSDEEP

      6144:8NDe2/vrQHtohIhqufhcmoZjwszeXmr8SeNpgdyuH1l+/Wd:C64vrQoMymCjb87g4/c

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks