Overview

overview

10

Static

static

10

NEAS.db73d...10.exe

windows7-x64

10

NEAS.db73d...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.db73d15dbb8f247b24f7e41904aa6c10.exe

  • Size

    82KB

  • Sample

    231028-y15qwabg4s

  • MD5

    db73d15dbb8f247b24f7e41904aa6c10

  • SHA1

    36157d8fb44e903dd2000e56db3e7da2b149f6bf

  • SHA256

    eeab4b1f2d4cdae31be6c4d26877c5235bc38ebd44b9a0123fd75951300caa33

  • SHA512

    e835293aefa40a547f51e6371a243ffab211a8c2472b91c76bb6495e619c881206367fa83291cb0da850a70259f6eb0e741bd1f8c8c817dddfbcab712026eb45

  • SSDEEP

    1536:tKNEsWXvsfbyvosEhlOvmq6uyIVP2L7Xpm6+wDSmQFN6TiN1sJtvQu:oFW/sfDsEymqQjDpm6tm7N6TO1SpD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.db73d15dbb8f247b24f7e41904aa6c10.exe

    • Size

      82KB

    • MD5

      db73d15dbb8f247b24f7e41904aa6c10

    • SHA1

      36157d8fb44e903dd2000e56db3e7da2b149f6bf

    • SHA256

      eeab4b1f2d4cdae31be6c4d26877c5235bc38ebd44b9a0123fd75951300caa33

    • SHA512

      e835293aefa40a547f51e6371a243ffab211a8c2472b91c76bb6495e619c881206367fa83291cb0da850a70259f6eb0e741bd1f8c8c817dddfbcab712026eb45

    • SSDEEP

      1536:tKNEsWXvsfbyvosEhlOvmq6uyIVP2L7Xpm6+wDSmQFN6TiN1sJtvQu:oFW/sfDsEymqQjDpm6tm7N6TO1SpD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks