Overview

overview

10

Static

static

10

NEAS.44926...70.exe

windows7-x64

10

NEAS.44926...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.449266f50384115f9fcc15961289f570.exe

  • Size

    104KB

  • Sample

    231021-z51s6aed64

  • MD5

    449266f50384115f9fcc15961289f570

  • SHA1

    5b80e281f75dfb190b4b0c231fbdbc3e8bac30c2

  • SHA256

    eb6bdbcd326062339085cf15df6040f7aabe32184fb072296979fdf5df7e1bec

  • SHA512

    1c91c30f4e45cb0555d3a373c07032d3cac8e379bf7d9bf4bad7db5d6fd52d3eba16d667f7cf3bb9cb59b5bf01d0c3baa43d61771579a5a9fbceb8cda3034164

  • SSDEEP

    3072:+25ATl86UgsPIOEEEEEEEEze5ix7cEGrhkngpDvchkqbAIQS:+2+0hEEEEEEEEa5ix4brq2Ahn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.449266f50384115f9fcc15961289f570.exe

    • Size

      104KB

    • MD5

      449266f50384115f9fcc15961289f570

    • SHA1

      5b80e281f75dfb190b4b0c231fbdbc3e8bac30c2

    • SHA256

      eb6bdbcd326062339085cf15df6040f7aabe32184fb072296979fdf5df7e1bec

    • SHA512

      1c91c30f4e45cb0555d3a373c07032d3cac8e379bf7d9bf4bad7db5d6fd52d3eba16d667f7cf3bb9cb59b5bf01d0c3baa43d61771579a5a9fbceb8cda3034164

    • SSDEEP

      3072:+25ATl86UgsPIOEEEEEEEEze5ix7cEGrhkngpDvchkqbAIQS:+2+0hEEEEEEEEa5ix4brq2Ahn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks