Overview

overview

10

Static

static

10

NEAS.3420d...20.exe

windows7-x64

10

NEAS.3420d...20.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3420dfc2450d6eb816714cfc1a6ec120.exe

  • Size

    669KB

  • Sample

    231022-vtpjjace81

  • MD5

    3420dfc2450d6eb816714cfc1a6ec120

  • SHA1

    abe36dd4252f17740f8102290859ad8ed0b4c39d

  • SHA256

    08dc0d20f6021c4c985e499a0bf9156629c98dfe4f0f9670be93e62f638e1560

  • SHA512

    ee09d40cc4b70d42401127d8c063295119b021a3025b4d6fcd13ce6e53177064379e1afa343c9d1cc4c9e883668f028f59348cacd4f321af9c8b32b1ed2c47fe

  • SSDEEP

    12288:yfnG5mqeVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:yfGsp6p5vihMpQnqrdX72LbY6x46uR/i

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.3420dfc2450d6eb816714cfc1a6ec120.exe

    • Size

      669KB

    • MD5

      3420dfc2450d6eb816714cfc1a6ec120

    • SHA1

      abe36dd4252f17740f8102290859ad8ed0b4c39d

    • SHA256

      08dc0d20f6021c4c985e499a0bf9156629c98dfe4f0f9670be93e62f638e1560

    • SHA512

      ee09d40cc4b70d42401127d8c063295119b021a3025b4d6fcd13ce6e53177064379e1afa343c9d1cc4c9e883668f028f59348cacd4f321af9c8b32b1ed2c47fe

    • SSDEEP

      12288:yfnG5mqeVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:yfGsp6p5vihMpQnqrdX72LbY6x46uR/i

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks