Overview

overview

10

Static

static

10

NEAS.04d93...d8.exe

windows7-x64

10

NEAS.04d93...d8.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.04d93afa4b914e7532c25e773da1a8d8.exe

  • Size

    378KB

  • Sample

    231028-wfsvgace8s

  • MD5

    04d93afa4b914e7532c25e773da1a8d8

  • SHA1

    a5f8f49251e729b9aef594d92df938fa2e27421b

  • SHA256

    83f434522208fb6865e31fa7554183a9546e3b8bb04a0feff1846a99b1eaa0ee

  • SHA512

    9acdbce22e1f616f2d112dcc7fdaffb319665a3b790b8e0d9eef9461e742fad4215d37202bae4cf8f04e59ed27a28a11f572c7b04527ed7376360fbb5a86d966

  • SSDEEP

    6144:9dzP7p71JCRE2eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42Gp:9JDp71Jl2eYr75lTefkY660fIaDZkY61

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.04d93afa4b914e7532c25e773da1a8d8.exe

    • Size

      378KB

    • MD5

      04d93afa4b914e7532c25e773da1a8d8

    • SHA1

      a5f8f49251e729b9aef594d92df938fa2e27421b

    • SHA256

      83f434522208fb6865e31fa7554183a9546e3b8bb04a0feff1846a99b1eaa0ee

    • SHA512

      9acdbce22e1f616f2d112dcc7fdaffb319665a3b790b8e0d9eef9461e742fad4215d37202bae4cf8f04e59ed27a28a11f572c7b04527ed7376360fbb5a86d966

    • SSDEEP

      6144:9dzP7p71JCRE2eYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42Gp:9JDp71Jl2eYr75lTefkY660fIaDZkY61

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks