Overview

overview

10

Static

static

10

NEAS.b7ee8...40.exe

windows7-x64

10

NEAS.b7ee8...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b7ee8dfb89e71674347524f8178a5040.exe

  • Size

    138KB

  • Sample

    231028-yyl6raaa8v

  • MD5

    b7ee8dfb89e71674347524f8178a5040

  • SHA1

    d3ad47992ca17e0bc3531e51ef4b819abf9b5a27

  • SHA256

    34de3ed6bd8cf686eb30e84d132dafaff579c44139d89c33a55a9e6ceef32d99

  • SHA512

    a3ce17ab7681ce49f54c2bbecace91688b83a07d8af2ea1b9aecf0f67041d09370f17882e06000c94b8cebc3f651add9bbf2d5d299d72c58d60c421c1acc5fd8

  • SSDEEP

    3072:jCETOjBWcL+yVFYKlWVwq6mun6XAmW2wS7IrHrY8pjq6:DO19L+uFNlWvXQmHwMOH/Vz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b7ee8dfb89e71674347524f8178a5040.exe

    • Size

      138KB

    • MD5

      b7ee8dfb89e71674347524f8178a5040

    • SHA1

      d3ad47992ca17e0bc3531e51ef4b819abf9b5a27

    • SHA256

      34de3ed6bd8cf686eb30e84d132dafaff579c44139d89c33a55a9e6ceef32d99

    • SHA512

      a3ce17ab7681ce49f54c2bbecace91688b83a07d8af2ea1b9aecf0f67041d09370f17882e06000c94b8cebc3f651add9bbf2d5d299d72c58d60c421c1acc5fd8

    • SSDEEP

      3072:jCETOjBWcL+yVFYKlWVwq6mun6XAmW2wS7IrHrY8pjq6:DO19L+uFNlWvXQmHwMOH/Vz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks