Overview

overview

10

Static

static

10

NEAS.47464...40.exe

windows7-x64

10

NEAS.47464...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.474648c2910f9b18c538d1b54dcda340.exe

  • Size

    648KB

  • Sample

    231022-vvmfkaeh58

  • MD5

    474648c2910f9b18c538d1b54dcda340

  • SHA1

    deb1a6bcf5cab53232b313f8f17e26b08f279ef7

  • SHA256

    c1d3161adb6496ea6524103acce90dfe8a012fcaeff8112523f0431830efb2a2

  • SHA512

    b0a50eeec009cefb4062942904901348215173d0b3826dd55e8a01409055ace9075e941079c8a57cbb59a7d9a567458f39d225e762e9855d29648848aa2420e3

  • SSDEEP

    12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwT:w+6N986Y7DusQHNd1KidKjttRYLwT

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.474648c2910f9b18c538d1b54dcda340.exe

    • Size

      648KB

    • MD5

      474648c2910f9b18c538d1b54dcda340

    • SHA1

      deb1a6bcf5cab53232b313f8f17e26b08f279ef7

    • SHA256

      c1d3161adb6496ea6524103acce90dfe8a012fcaeff8112523f0431830efb2a2

    • SHA512

      b0a50eeec009cefb4062942904901348215173d0b3826dd55e8a01409055ace9075e941079c8a57cbb59a7d9a567458f39d225e762e9855d29648848aa2420e3

    • SSDEEP

      12288:w+67XR9JSSxvYGdodHDusQHNd1KidKjttRYLwT:w+6N986Y7DusQHNd1KidKjttRYLwT

    Score
    10/10
    dropperpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks