Overview

overview

10

Static

static

10

NEAS.b0d44...b0.exe

windows7-x64

10

NEAS.b0d44...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b0d44a68537e43b1f5410d4f1a7503b0.exe

  • Size

    176KB

  • Sample

    231022-vzwj2aga7x

  • MD5

    b0d44a68537e43b1f5410d4f1a7503b0

  • SHA1

    cd10f92c2cb4f77a71210c87d5b764351e5c6226

  • SHA256

    e1e5d2d890473e9bd4f390c115641dd9d193ef940e7eda4daf8e03a48ed21d9a

  • SHA512

    3577eefcacac8a16ecff2b4fc22ec4bd3f8b39fd96b7535cc97bd0fc677a0aa31ed57cf727e88db16d8e088489e255ca1322bc075aeb5c385661cf0831cc591f

  • SSDEEP

    3072:dOd2BefEUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:U2sJjVu3w8BdTj2V3ppQ60MMCf0RnQ4

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b0d44a68537e43b1f5410d4f1a7503b0.exe

    • Size

      176KB

    • MD5

      b0d44a68537e43b1f5410d4f1a7503b0

    • SHA1

      cd10f92c2cb4f77a71210c87d5b764351e5c6226

    • SHA256

      e1e5d2d890473e9bd4f390c115641dd9d193ef940e7eda4daf8e03a48ed21d9a

    • SHA512

      3577eefcacac8a16ecff2b4fc22ec4bd3f8b39fd96b7535cc97bd0fc677a0aa31ed57cf727e88db16d8e088489e255ca1322bc075aeb5c385661cf0831cc591f

    • SSDEEP

      3072:dOd2BefEUjmOiBn3w8BdTj2h33ppaS46HUF2pMXSfN6RnQShl:U2sJjVu3w8BdTj2V3ppQ60MMCf0RnQ4

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks