Overview

overview

10

Static

static

10

NEAS.b4ae7...50.exe

windows7-x64

10

NEAS.b4ae7...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b4ae794df790bc76c8f7577d5b171050.exe

  • Size

    165KB

  • Sample

    231101-cz7m7abc77

  • MD5

    b4ae794df790bc76c8f7577d5b171050

  • SHA1

    8d8dffe1ec2bc6bd771a4b042d053df8c1bb0692

  • SHA256

    377ff2799e819fce598d29160ca8bd4ddbbd0fa25b3dc96cdf87e10716a63d45

  • SHA512

    7bcfe336c79d6e4fe1079ea6dfc6252d38196a08934bea1dfecca40a1c3a62dd4776691b00fab9454edb11d8de55325daa6f6bef89fa2e696b1db1d0ac2186b6

  • SSDEEP

    3072:1nSLVarD1r7TdQMPChQbGxI8opFWehLrCimBaH8UH300UqrJ:1r1r7Td9PeQbGxI8oPWHpaH8m3pUqN

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b4ae794df790bc76c8f7577d5b171050.exe

    • Size

      165KB

    • MD5

      b4ae794df790bc76c8f7577d5b171050

    • SHA1

      8d8dffe1ec2bc6bd771a4b042d053df8c1bb0692

    • SHA256

      377ff2799e819fce598d29160ca8bd4ddbbd0fa25b3dc96cdf87e10716a63d45

    • SHA512

      7bcfe336c79d6e4fe1079ea6dfc6252d38196a08934bea1dfecca40a1c3a62dd4776691b00fab9454edb11d8de55325daa6f6bef89fa2e696b1db1d0ac2186b6

    • SSDEEP

      3072:1nSLVarD1r7TdQMPChQbGxI8opFWehLrCimBaH8UH300UqrJ:1r1r7Td9PeQbGxI8oPWHpaH8m3pUqN

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks