Overview

overview

10

Static

static

10

NEAS.8ee16...70.exe

windows7-x64

10

NEAS.8ee16...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.8ee16bfbb7bb03ecef981ddaf94bac70.exe

  • Size

    104KB

  • Sample

    231028-ypjdhaag22

  • MD5

    8ee16bfbb7bb03ecef981ddaf94bac70

  • SHA1

    579e659683af9c19753388a1969fc7369021e2d7

  • SHA256

    7e15ddc635cce751eb097f25a5f860e3151196a99d564acd7022df9b5cb297bf

  • SHA512

    cc5e9c989241a3dc9d35372134afe0983f50d4110926ff31322b432c431bc89ce27d25d9d5fa1af04f1ed50e06cf002cb0a849f32e5431da14e62e0907bc4f24

  • SSDEEP

    3072:RFQjWbu7fUn0FtPGF8S8e5/x7cEGrhkngpDvchkqbAIQS:nQF1NGF8K5/x4brq2Ahn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.8ee16bfbb7bb03ecef981ddaf94bac70.exe

    • Size

      104KB

    • MD5

      8ee16bfbb7bb03ecef981ddaf94bac70

    • SHA1

      579e659683af9c19753388a1969fc7369021e2d7

    • SHA256

      7e15ddc635cce751eb097f25a5f860e3151196a99d564acd7022df9b5cb297bf

    • SHA512

      cc5e9c989241a3dc9d35372134afe0983f50d4110926ff31322b432c431bc89ce27d25d9d5fa1af04f1ed50e06cf002cb0a849f32e5431da14e62e0907bc4f24

    • SSDEEP

      3072:RFQjWbu7fUn0FtPGF8S8e5/x7cEGrhkngpDvchkqbAIQS:nQF1NGF8K5/x4brq2Ahn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks