Overview

overview

10

Static

static

10

NEAS.32aef...b0.exe

windows7-x64

10

NEAS.32aef...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.32aefa0061dd331ece3e1ca6efc88cb0.exe

  • Size

    704KB

  • Sample

    231101-dgfx7abe64

  • MD5

    32aefa0061dd331ece3e1ca6efc88cb0

  • SHA1

    250f71910308c50bf5d4ccf530e43761e734d8eb

  • SHA256

    ffec4b7906a10520cc4f4a78070b5972e31994a86aaeb5e20a5f3d90a1717677

  • SHA512

    9ea75522346a4535996275eef2814b1c01764bae1573d5d20b82cfd88983cf5f424d1e904af6103c447cbb26b35b06601dbc65e1d903e8739187e67e5943039d

  • SSDEEP

    12288:5TK3TSrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:5TK3WrQg5Wm0BmmvFimm0MTP7hm0b

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.32aefa0061dd331ece3e1ca6efc88cb0.exe

    • Size

      704KB

    • MD5

      32aefa0061dd331ece3e1ca6efc88cb0

    • SHA1

      250f71910308c50bf5d4ccf530e43761e734d8eb

    • SHA256

      ffec4b7906a10520cc4f4a78070b5972e31994a86aaeb5e20a5f3d90a1717677

    • SHA512

      9ea75522346a4535996275eef2814b1c01764bae1573d5d20b82cfd88983cf5f424d1e904af6103c447cbb26b35b06601dbc65e1d903e8739187e67e5943039d

    • SSDEEP

      12288:5TK3TSrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5KW:5TK3WrQg5Wm0BmmvFimm0MTP7hm0b

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks