Overview

overview

10

Static

static

10

NEAS.827f6...89.exe

windows7-x64

10

NEAS.827f6...89.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.827f6c3d6a005c4388d639fc09f97e89.exe

  • Size

    401KB

  • Sample

    231024-rfaxfadd5x

  • MD5

    827f6c3d6a005c4388d639fc09f97e89

  • SHA1

    2b4f45f02fa91c3aed09fcf6b4684ee1b75e9df4

  • SHA256

    5877c420ef0739262d9c23c791ef7749882c596f3445229cad63cf92865e896d

  • SHA512

    514e162c17fa59d3fe7d0a0ca368dcf014b2afe082bbf4f17d1826040978462ae1a544f7895c26f4c4b83f43ab1acfc02fddded31be3c8b7e5f24f642a54ce46

  • SSDEEP

    6144:k4eSktX9LUndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:qandpV6yYP4rbpV6yYPg058KrY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.827f6c3d6a005c4388d639fc09f97e89.exe

    • Size

      401KB

    • MD5

      827f6c3d6a005c4388d639fc09f97e89

    • SHA1

      2b4f45f02fa91c3aed09fcf6b4684ee1b75e9df4

    • SHA256

      5877c420ef0739262d9c23c791ef7749882c596f3445229cad63cf92865e896d

    • SHA512

      514e162c17fa59d3fe7d0a0ca368dcf014b2afe082bbf4f17d1826040978462ae1a544f7895c26f4c4b83f43ab1acfc02fddded31be3c8b7e5f24f642a54ce46

    • SSDEEP

      6144:k4eSktX9LUndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:qandpV6yYP4rbpV6yYPg058KrY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks