Overview

overview

10

Static

static

10

NEAS.a0896...30.exe

windows7-x64

10

NEAS.a0896...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a08965908ab265e12d53f2a665cc4430.exe

  • Size

    80KB

  • Sample

    231028-yp4pfaba98

  • MD5

    a08965908ab265e12d53f2a665cc4430

  • SHA1

    5ff1009c473bc57e00118a861065caab7605912f

  • SHA256

    2c995521269a85f1b9a9693b109e6b18ef125549020ebc413d6096aa3f545878

  • SHA512

    c87738fd788eec0465d7b681050de6aefef9bc734683c392b60ef0f22b3b6b7ce2cc3c7dc5fca9b650646b693c82735e44630734107d3f91f3bf44c65227bf51

  • SSDEEP

    1536:VbHrciUnJuvAlopWG9lcPOsS7EZudtKp2Lt85wfi+TjRC/6i:VbLctukPOsK5P8wf1TjYL

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a08965908ab265e12d53f2a665cc4430.exe

    • Size

      80KB

    • MD5

      a08965908ab265e12d53f2a665cc4430

    • SHA1

      5ff1009c473bc57e00118a861065caab7605912f

    • SHA256

      2c995521269a85f1b9a9693b109e6b18ef125549020ebc413d6096aa3f545878

    • SHA512

      c87738fd788eec0465d7b681050de6aefef9bc734683c392b60ef0f22b3b6b7ce2cc3c7dc5fca9b650646b693c82735e44630734107d3f91f3bf44c65227bf51

    • SSDEEP

      1536:VbHrciUnJuvAlopWG9lcPOsS7EZudtKp2Lt85wfi+TjRC/6i:VbLctukPOsK5P8wf1TjYL

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks