Overview

overview

10

Static

static

10

NEAS.d17f2...d0.exe

windows7-x64

10

NEAS.d17f2...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d17f2c2110624754d921633397a228d0.exe

  • Size

    161KB

  • Sample

    231028-y1bg2acg85

  • MD5

    d17f2c2110624754d921633397a228d0

  • SHA1

    0727dfcd2cd43d1d3e308e70b7da606ccb1647df

  • SHA256

    112a13148264020204dcf4d68099e33584c2ef29d3b3e9cde2c7b2da544954d0

  • SHA512

    a40ba9d4d4ba2a5e6340751d4a857c5a1f26b33cad0f6c0c1466159cb5cdc49f61c5de64c88ab65a1139594c927e62ffb15bfd593a2f92cc2172f68ed5fd343f

  • SSDEEP

    3072:5iCZkRF8Q1SPJYsUp4k9VwtCJXeex7rrIRZK8K8/kv:ECZXPJJK4k9VwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d17f2c2110624754d921633397a228d0.exe

    • Size

      161KB

    • MD5

      d17f2c2110624754d921633397a228d0

    • SHA1

      0727dfcd2cd43d1d3e308e70b7da606ccb1647df

    • SHA256

      112a13148264020204dcf4d68099e33584c2ef29d3b3e9cde2c7b2da544954d0

    • SHA512

      a40ba9d4d4ba2a5e6340751d4a857c5a1f26b33cad0f6c0c1466159cb5cdc49f61c5de64c88ab65a1139594c927e62ffb15bfd593a2f92cc2172f68ed5fd343f

    • SSDEEP

      3072:5iCZkRF8Q1SPJYsUp4k9VwtCJXeex7rrIRZK8K8/kv:ECZXPJJK4k9VwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks