Overview

overview

10

Static

static

10

NEAS.f8a88...80.exe

windows7-x64

10

NEAS.f8a88...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f8a8855283a006bc6dbd7e5c4a562280.exe

  • Size

    96KB

  • Sample

    231022-v45cqsbb4s

  • MD5

    f8a8855283a006bc6dbd7e5c4a562280

  • SHA1

    e3c60839bf6b30cf48954e1bd6eb135d8c53da53

  • SHA256

    4d7c6bc5dcf73c4f84c9468d5d2dfbd3408b0f6839878eb04eac7c90b4905577

  • SHA512

    13bbf51734507ae209ce75092fbf560bb3faf855aa4170e7350baf3e469874370b221cd9cb103c0980a1c5fbd8739ee5b55eda655b2d130ffcf98cd99c7cd505

  • SSDEEP

    1536:mhRP6tQxmH2fC/eekZVt5NNizyc1APgnDNBrcN4i6tBYuR3PlNPMAZ:mTSt/H2fykZNNSyc1APgxed6BYudlNPl

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f8a8855283a006bc6dbd7e5c4a562280.exe

    • Size

      96KB

    • MD5

      f8a8855283a006bc6dbd7e5c4a562280

    • SHA1

      e3c60839bf6b30cf48954e1bd6eb135d8c53da53

    • SHA256

      4d7c6bc5dcf73c4f84c9468d5d2dfbd3408b0f6839878eb04eac7c90b4905577

    • SHA512

      13bbf51734507ae209ce75092fbf560bb3faf855aa4170e7350baf3e469874370b221cd9cb103c0980a1c5fbd8739ee5b55eda655b2d130ffcf98cd99c7cd505

    • SSDEEP

      1536:mhRP6tQxmH2fC/eekZVt5NNizyc1APgnDNBrcN4i6tBYuR3PlNPMAZ:mTSt/H2fykZNNSyc1APgxed6BYudlNPl

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks