Overview

overview

10

Static

static

10

NEAS.d2ab4...50.exe

windows7-x64

10

NEAS.d2ab4...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d2ab49a488e3319bfe37ebad234fb950.exe

  • Size

    347KB

  • Sample

    231022-v2fxcshb5t

  • MD5

    d2ab49a488e3319bfe37ebad234fb950

  • SHA1

    cdbee5f30b0478e0f568bc50ae5ab54a2ed75c16

  • SHA256

    3003d3ed4167d8c9827acc71a5bf75747fb7b7afd5a9cf64dbb2e5e02cfd8047

  • SHA512

    fda7ebc5edd6f1e99e8292c6636de34cb45d9b8dda4c193668974d9356583fd7b3f4c0f52b4225bb0e242ae65ee9198cad616dfe0799b45e62b656cc41db335b

  • SSDEEP

    6144:A8hvslxi52x4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:A8Sx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d2ab49a488e3319bfe37ebad234fb950.exe

    • Size

      347KB

    • MD5

      d2ab49a488e3319bfe37ebad234fb950

    • SHA1

      cdbee5f30b0478e0f568bc50ae5ab54a2ed75c16

    • SHA256

      3003d3ed4167d8c9827acc71a5bf75747fb7b7afd5a9cf64dbb2e5e02cfd8047

    • SHA512

      fda7ebc5edd6f1e99e8292c6636de34cb45d9b8dda4c193668974d9356583fd7b3f4c0f52b4225bb0e242ae65ee9198cad616dfe0799b45e62b656cc41db335b

    • SSDEEP

      6144:A8hvslxi52x4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:A8Sx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks