Overview

overview

10

Static

static

10

NEAS.edebd...40.exe

windows7-x64

10

NEAS.edebd...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.edebde3e676f8b0c80ae37521357a340.exe

  • Size

    78KB

  • Sample

    231028-y28h6aec22

  • MD5

    edebde3e676f8b0c80ae37521357a340

  • SHA1

    4e080c4a085d11af26a01db9c364d00d236530a9

  • SHA256

    2c7beddde0e936c3e1eb4f83e01dc08b0b9602bc2c8b8be1264388d3ba2e85c2

  • SHA512

    bf6b5e619c14562f6c538b0cd686b371b19a117e26ca8a101b635fad61ebbb546b1cd62036b7a7725bd8d0c8bf1a27cf63b0b896bcdd287adf56fbc3c8098756

  • SSDEEP

    1536:rjYcFKFzivuEDfZ5Mu3f5PSG0M59xds7YJi66yf5oAnqDM+4yyF:nkFziVfZ+G5vL7xpJi6Cuq4cyF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.edebde3e676f8b0c80ae37521357a340.exe

    • Size

      78KB

    • MD5

      edebde3e676f8b0c80ae37521357a340

    • SHA1

      4e080c4a085d11af26a01db9c364d00d236530a9

    • SHA256

      2c7beddde0e936c3e1eb4f83e01dc08b0b9602bc2c8b8be1264388d3ba2e85c2

    • SHA512

      bf6b5e619c14562f6c538b0cd686b371b19a117e26ca8a101b635fad61ebbb546b1cd62036b7a7725bd8d0c8bf1a27cf63b0b896bcdd287adf56fbc3c8098756

    • SSDEEP

      1536:rjYcFKFzivuEDfZ5Mu3f5PSG0M59xds7YJi66yf5oAnqDM+4yyF:nkFziVfZ+G5vL7xpJi6Cuq4cyF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks