Overview

overview

10

Static

static

10

NEAS.9911d...90.exe

windows7-x64

10

NEAS.9911d...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.9911d8829e2f1211a0536b60ef239790.exe

  • Size

    384KB

  • Sample

    231028-ypwc3ahc8x

  • MD5

    9911d8829e2f1211a0536b60ef239790

  • SHA1

    ff26d7c42affb1bfc9c880e8baa210a89baa9029

  • SHA256

    d3c708c20fb564fce0e0483f9e3658bf1b4eae6e5979cd673b60413f8e86684e

  • SHA512

    fc0d1c16136133480033af5c6929b1aca0e5b0b88dd38d56b78690679e82bf5eeccfd463ad599fbf12d7043b9e35ffd477945768368b6b9484613216cd2c9496

  • SSDEEP

    6144:TLdnzTYaT15f7o+STYaT15fsnoW6B1S6Kvw2fV9rU+Lw6gYviIajJsnIfvJPNF7:TLtTYapJoTYapbt1S3vwyjrU+LKYAJIs

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.9911d8829e2f1211a0536b60ef239790.exe

    • Size

      384KB

    • MD5

      9911d8829e2f1211a0536b60ef239790

    • SHA1

      ff26d7c42affb1bfc9c880e8baa210a89baa9029

    • SHA256

      d3c708c20fb564fce0e0483f9e3658bf1b4eae6e5979cd673b60413f8e86684e

    • SHA512

      fc0d1c16136133480033af5c6929b1aca0e5b0b88dd38d56b78690679e82bf5eeccfd463ad599fbf12d7043b9e35ffd477945768368b6b9484613216cd2c9496

    • SSDEEP

      6144:TLdnzTYaT15f7o+STYaT15fsnoW6B1S6Kvw2fV9rU+Lw6gYviIajJsnIfvJPNF7:TLtTYapJoTYapbt1S3vwyjrU+LKYAJIs

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks