Overview

overview

10

Static

static

10

NEAS.f1609...80.exe

windows7-x64

10

NEAS.f1609...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f160913088d26a4596455e5394531080.exe

  • Size

    121KB

  • Sample

    231022-v4htqsce47

  • MD5

    f160913088d26a4596455e5394531080

  • SHA1

    5508acfa84c7cb47a0901ceb0e3250b3c3749011

  • SHA256

    3cecb9d8bd3a4ca548123f2671c57943d1c729b465b7c1b46e3c785125c2a7a8

  • SHA512

    728bbf2d09e8cff871ea7024b6f840b0d71107b6dae1f10b5754b852119ce0ea995bbfeef13c57b2381dabb96277b0b8a6f7e4f7bf42aff7c1b2f19704f25066

  • SSDEEP

    3072:FeirAKDncsle/SUtQeQk96STeGFgO7AJnD5tvv:FaKDLle/zQK96TGFgOarvv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f160913088d26a4596455e5394531080.exe

    • Size

      121KB

    • MD5

      f160913088d26a4596455e5394531080

    • SHA1

      5508acfa84c7cb47a0901ceb0e3250b3c3749011

    • SHA256

      3cecb9d8bd3a4ca548123f2671c57943d1c729b465b7c1b46e3c785125c2a7a8

    • SHA512

      728bbf2d09e8cff871ea7024b6f840b0d71107b6dae1f10b5754b852119ce0ea995bbfeef13c57b2381dabb96277b0b8a6f7e4f7bf42aff7c1b2f19704f25066

    • SSDEEP

      3072:FeirAKDncsle/SUtQeQk96STeGFgO7AJnD5tvv:FaKDLle/zQK96TGFgOarvv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks