Overview

overview

10

Static

static

10

NEAS.ba82e...86.exe

windows7-x64

10

NEAS.ba82e...86.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ba82ef16f9b05b933c99835ec8fd5786.exe

  • Size

    109KB

  • Sample

    231028-wgcjwaee29

  • MD5

    ba82ef16f9b05b933c99835ec8fd5786

  • SHA1

    c06651523a8df9e9ae1b297f73a68b844652359c

  • SHA256

    59ea8bcca7a5fe02d8c5f8585d9c92a4d25131cf270d28ff6cc99f78f0d0c7cd

  • SHA512

    dc0c3fd3da6cbdc5ac84b5403beabf186de5a85496e98d80259f8b691bee1f808e327f138db2c255b6cead273c349a5177c0d4a5e08b0c482b2dc4b49b8a7231

  • SSDEEP

    3072:/tyPwoMyoBtpBStGoEzPAIa/KId/ApnJ9NLCqwzBu1DjHLMVDqqkSpR:/IP0BzBWEEtGJ9dwtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ba82ef16f9b05b933c99835ec8fd5786.exe

    • Size

      109KB

    • MD5

      ba82ef16f9b05b933c99835ec8fd5786

    • SHA1

      c06651523a8df9e9ae1b297f73a68b844652359c

    • SHA256

      59ea8bcca7a5fe02d8c5f8585d9c92a4d25131cf270d28ff6cc99f78f0d0c7cd

    • SHA512

      dc0c3fd3da6cbdc5ac84b5403beabf186de5a85496e98d80259f8b691bee1f808e327f138db2c255b6cead273c349a5177c0d4a5e08b0c482b2dc4b49b8a7231

    • SSDEEP

      3072:/tyPwoMyoBtpBStGoEzPAIa/KId/ApnJ9NLCqwzBu1DjHLMVDqqkSpR:/IP0BzBWEEtGJ9dwtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks