Overview

overview

10

Static

static

10

NEAS.6f81a...00.exe

windows7-x64

10

NEAS.6f81a...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.6f81aaf45ae5ed9db4c80dbee5f26300.exe

  • Size

    401KB

  • Sample

    231028-ynhqksaa24

  • MD5

    6f81aaf45ae5ed9db4c80dbee5f26300

  • SHA1

    481910c164b12e4841348719a5203da56704c48f

  • SHA256

    94ac771875f6ee73e1296953f892ae30714f5d0b40fc994d13144621cc7c7f16

  • SHA512

    427a1a53ed88181e6b3a82ebfb3115f12ad7020689fd7bc8a8fe68400eaa988fc64005ecf5677dfe19be41d60b123b05c93192c1d3d695735e8a29e2c7bc083b

  • SSDEEP

    6144:RdHGXndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:RwndpV6yYP4rbpV6yYPg058KrY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.6f81aaf45ae5ed9db4c80dbee5f26300.exe

    • Size

      401KB

    • MD5

      6f81aaf45ae5ed9db4c80dbee5f26300

    • SHA1

      481910c164b12e4841348719a5203da56704c48f

    • SHA256

      94ac771875f6ee73e1296953f892ae30714f5d0b40fc994d13144621cc7c7f16

    • SHA512

      427a1a53ed88181e6b3a82ebfb3115f12ad7020689fd7bc8a8fe68400eaa988fc64005ecf5677dfe19be41d60b123b05c93192c1d3d695735e8a29e2c7bc083b

    • SSDEEP

      6144:RdHGXndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:RwndpV6yYP4rbpV6yYPg058KrY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks