Overview

overview

10

Static

static

10

NEAS.dde35...90.exe

windows7-x64

10

NEAS.dde35...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.dde3517cbdd1792dd86f5e8f9970ea90.exe

  • Size

    82KB

  • Sample

    231022-v29jnshf9w

  • MD5

    dde3517cbdd1792dd86f5e8f9970ea90

  • SHA1

    bcc7e811e4d7062ff6b7f6a8f568272b2a2fb3a0

  • SHA256

    87443342f3ff700b35d096ae57ee6b19416e9cd34cbf2b7277cd3e02caebf79b

  • SHA512

    bbda427bb749d4abd5be728ea76868ca172b77e004bc0529cc190f7afda4cd0bc12fb07ad81695a00f5c34087de4ebbaa9a9e9c59626d56128c1bdbbb008d93b

  • SSDEEP

    1536:Xh14LAh2mpRHU8ywy6EnsOk6ha8y2L7PQpm6+wDSmQFN6TiN1sJtvQu:XhaLAhbQ8zDEnRa8/kpm6tm7N6TO1SpD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dde3517cbdd1792dd86f5e8f9970ea90.exe

    • Size

      82KB

    • MD5

      dde3517cbdd1792dd86f5e8f9970ea90

    • SHA1

      bcc7e811e4d7062ff6b7f6a8f568272b2a2fb3a0

    • SHA256

      87443342f3ff700b35d096ae57ee6b19416e9cd34cbf2b7277cd3e02caebf79b

    • SHA512

      bbda427bb749d4abd5be728ea76868ca172b77e004bc0529cc190f7afda4cd0bc12fb07ad81695a00f5c34087de4ebbaa9a9e9c59626d56128c1bdbbb008d93b

    • SSDEEP

      1536:Xh14LAh2mpRHU8ywy6EnsOk6ha8y2L7PQpm6+wDSmQFN6TiN1sJtvQu:XhaLAhbQ8zDEnRa8/kpm6tm7N6TO1SpD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks