Overview

overview

10

Static

static

10

NEAS.ed5f7...70.exe

windows7-x64

10

NEAS.ed5f7...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ed5f784dccd87041b8da19735a079670.exe

  • Size

    305KB

  • Sample

    231022-v4ahcscc98

  • MD5

    ed5f784dccd87041b8da19735a079670

  • SHA1

    5961d02f1be419e8b86d402bf7031e46ac2b0bd5

  • SHA256

    51d9d6937b6eb1a3e8e29b89980c9d3723fa117d996137fbf236424815ce8e82

  • SHA512

    82ebfd2c561828800c7cab80c8827635d455e5cb8d6d3462b2bfdb15c092fad28a1f9dbd7248cd32f4ed592fe8dcf3ed42e4db96861f8f0f6b990d33ff0bdd56

  • SSDEEP

    6144:oKG4a9dIcNT2NxunXe8yhrtMsQBvli+RQFdq:oC4dcvAO8qRMsrOQF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ed5f784dccd87041b8da19735a079670.exe

    • Size

      305KB

    • MD5

      ed5f784dccd87041b8da19735a079670

    • SHA1

      5961d02f1be419e8b86d402bf7031e46ac2b0bd5

    • SHA256

      51d9d6937b6eb1a3e8e29b89980c9d3723fa117d996137fbf236424815ce8e82

    • SHA512

      82ebfd2c561828800c7cab80c8827635d455e5cb8d6d3462b2bfdb15c092fad28a1f9dbd7248cd32f4ed592fe8dcf3ed42e4db96861f8f0f6b990d33ff0bdd56

    • SSDEEP

      6144:oKG4a9dIcNT2NxunXe8yhrtMsQBvli+RQFdq:oC4dcvAO8qRMsrOQF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks