Overview

overview

10

Static

static

10

NEAS.00be0...40.exe

windows7-x64

10

NEAS.00be0...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.00be01281efb459c41f973f8aa712d40.exe

  • Size

    161KB

  • Sample

    231028-wl3xmaeh28

  • MD5

    00be01281efb459c41f973f8aa712d40

  • SHA1

    80109149eaf4b637f228acabeaac5b31de85a249

  • SHA256

    a55c79baf2c4f1bbdae8633cfd3fe76cbf3501dd23d6dd8763197a94b79b1292

  • SHA512

    bda329815a1357ddc3c0777c933e5ca6467bc50a1ddc5cbcd932fa517b75264ef47d7b33194de1cad7eff79b972b3dec91ba73c0a80618578979bc4b995f274b

  • SSDEEP

    3072:rZAG2QtTXBvyp2+KOAPg2/D4qCkHVwtCJXeex7rrIRZK8K8/kv:rFtbBU0jCkHVwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.00be01281efb459c41f973f8aa712d40.exe

    • Size

      161KB

    • MD5

      00be01281efb459c41f973f8aa712d40

    • SHA1

      80109149eaf4b637f228acabeaac5b31de85a249

    • SHA256

      a55c79baf2c4f1bbdae8633cfd3fe76cbf3501dd23d6dd8763197a94b79b1292

    • SHA512

      bda329815a1357ddc3c0777c933e5ca6467bc50a1ddc5cbcd932fa517b75264ef47d7b33194de1cad7eff79b972b3dec91ba73c0a80618578979bc4b995f274b

    • SSDEEP

      3072:rZAG2QtTXBvyp2+KOAPg2/D4qCkHVwtCJXeex7rrIRZK8K8/kv:rFtbBU0jCkHVwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks