Overview

overview

10

Static

static

10

NEAS.d9e99...f4.exe

windows7-x64

10

NEAS.d9e99...f4.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d9e992944ee42b2b8b4bfe1ffec46bf4.exe

  • Size

    155KB

  • Sample

    231028-wgkkgsef48

  • MD5

    d9e992944ee42b2b8b4bfe1ffec46bf4

  • SHA1

    1be4ce9ea5b92d58a4f66371ade6013dd81d4cdc

  • SHA256

    519908152ef5ec1feb56e9653d87ef550d212c8dbbb9410a5f2efd8d4f15bf45

  • SHA512

    c35bc15cda56fa30a928ece503f6b8250453cdd41406e6fa137d66b3d13702f178946b6b2b1dfdb4a25d51c549cf8b539bdf1ea55c66086964b2202644e3f8cd

  • SSDEEP

    3072:eAXEIXLClrxbi4BjEGt4roGAfT7rIEznYfzB9BSwWO:eAbXul9iRzQT7rIYOzLcK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d9e992944ee42b2b8b4bfe1ffec46bf4.exe

    • Size

      155KB

    • MD5

      d9e992944ee42b2b8b4bfe1ffec46bf4

    • SHA1

      1be4ce9ea5b92d58a4f66371ade6013dd81d4cdc

    • SHA256

      519908152ef5ec1feb56e9653d87ef550d212c8dbbb9410a5f2efd8d4f15bf45

    • SHA512

      c35bc15cda56fa30a928ece503f6b8250453cdd41406e6fa137d66b3d13702f178946b6b2b1dfdb4a25d51c549cf8b539bdf1ea55c66086964b2202644e3f8cd

    • SSDEEP

      3072:eAXEIXLClrxbi4BjEGt4roGAfT7rIEznYfzB9BSwWO:eAbXul9iRzQT7rIYOzLcK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks