Overview

overview

10

Static

static

10

NEAS.ef42a...50.exe

windows7-x64

10

NEAS.ef42a...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ef42a349950a77b7a3333bc217b83650.exe

  • Size

    398KB

  • Sample

    231028-y3a92sec63

  • MD5

    ef42a349950a77b7a3333bc217b83650

  • SHA1

    3e2dcbabcecbb696fab292c1d7930d672caee7b7

  • SHA256

    927430e305698e1bb9246eb542c0ac23e34162d7bc665b1a4bb51880ee46b34c

  • SHA512

    4043b320214520c3bbea3cfdc48d5e319b4ec256072b1d0b9ac5a827c98a44d23543e3cd22ee16cae4bd0861bb4c842f47b396e96e31b4d127098cbb01f5e207

  • SSDEEP

    12288:XBhxL6t3XGCByvNv54B9f01ZmHByvNv5imipWf0Aq:X5L6t3XGpvr4B9f01ZmQvrimipWf0Aq

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ef42a349950a77b7a3333bc217b83650.exe

    • Size

      398KB

    • MD5

      ef42a349950a77b7a3333bc217b83650

    • SHA1

      3e2dcbabcecbb696fab292c1d7930d672caee7b7

    • SHA256

      927430e305698e1bb9246eb542c0ac23e34162d7bc665b1a4bb51880ee46b34c

    • SHA512

      4043b320214520c3bbea3cfdc48d5e319b4ec256072b1d0b9ac5a827c98a44d23543e3cd22ee16cae4bd0861bb4c842f47b396e96e31b4d127098cbb01f5e207

    • SSDEEP

      12288:XBhxL6t3XGCByvNv54B9f01ZmHByvNv5imipWf0Aq:X5L6t3XGpvr4B9f01ZmQvrimipWf0Aq

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks