Overview

overview

10

Static

static

10

NEAS.eeb26...d0.exe

windows7-x64

10

NEAS.eeb26...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.eeb26d91ea4f2543b790c16e58b4d2d0.exe

  • Size

    113KB

  • Sample

    231028-y292zscf4t

  • MD5

    eeb26d91ea4f2543b790c16e58b4d2d0

  • SHA1

    83fce5bf0f260a09ae72f87df00ff912902e2ca8

  • SHA256

    a50e013bc906c2b28f4c16ad39b5a265f9566f31c4b5b97b19ec87fd07436e7f

  • SHA512

    16b315a13c2bf6f715936b7779b2679d3d9ffc01bd85f54a1adc4d48bf7dd2187c33c690a587f96f04daddd4b19f298030b92f820647d959ee809fa713ef0295

  • SSDEEP

    3072:TMahZwvA4OiB9nugCe8uvQa7gRj9/S2Kn:PPwcijnISMRNF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.eeb26d91ea4f2543b790c16e58b4d2d0.exe

    • Size

      113KB

    • MD5

      eeb26d91ea4f2543b790c16e58b4d2d0

    • SHA1

      83fce5bf0f260a09ae72f87df00ff912902e2ca8

    • SHA256

      a50e013bc906c2b28f4c16ad39b5a265f9566f31c4b5b97b19ec87fd07436e7f

    • SHA512

      16b315a13c2bf6f715936b7779b2679d3d9ffc01bd85f54a1adc4d48bf7dd2187c33c690a587f96f04daddd4b19f298030b92f820647d959ee809fa713ef0295

    • SSDEEP

      3072:TMahZwvA4OiB9nugCe8uvQa7gRj9/S2Kn:PPwcijnISMRNF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks