Overview

overview

10

Static

static

10

NEAS.b8550...10.exe

windows7-x64

10

NEAS.b8550...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b855077b45106d78ff1de67d7ad3a210.exe

  • Size

    235KB

  • Sample

    231028-wgb84sch2v

  • MD5

    b855077b45106d78ff1de67d7ad3a210

  • SHA1

    303e961631942b62d08a094ca90ba988cd153056

  • SHA256

    35f1f7b39ec20133dfeb32b46d94af6b266701459d22004716f25d5825225b84

  • SHA512

    b3d5ca8731e0c8a4b5a93e365b0d02e59198e324205588e99caa05cb76bb413b8c17acf9b689f67225d134698888c07f7b07b21c69ac18db1c0003cccfde1d1d

  • SSDEEP

    3072:a3Xm3Y0/HOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJaW4bI5:/Z/ulrtMsQB+vn87L5A5

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b855077b45106d78ff1de67d7ad3a210.exe

    • Size

      235KB

    • MD5

      b855077b45106d78ff1de67d7ad3a210

    • SHA1

      303e961631942b62d08a094ca90ba988cd153056

    • SHA256

      35f1f7b39ec20133dfeb32b46d94af6b266701459d22004716f25d5825225b84

    • SHA512

      b3d5ca8731e0c8a4b5a93e365b0d02e59198e324205588e99caa05cb76bb413b8c17acf9b689f67225d134698888c07f7b07b21c69ac18db1c0003cccfde1d1d

    • SSDEEP

      3072:a3Xm3Y0/HOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJaW4bI5:/Z/ulrtMsQB+vn87L5A5

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.