Overview

overview

10

Static

static

10

NEAS.ad2b5...00.exe

windows7-x64

10

NEAS.ad2b5...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ad2b5708821c64536d8dda3c7e070c00.exe

  • Size

    125KB

  • Sample

    231101-dr82qabf59

  • MD5

    ad2b5708821c64536d8dda3c7e070c00

  • SHA1

    591ca4c0eec91c1000e79174e702092878dfe58d

  • SHA256

    d63e63e5b4dce68d5eb0a789ea290557ff28187277362fa3781817abb9d0c5e9

  • SHA512

    a7d0aae77cd1d9decdaf839a22e16300a0b8df6915cf20b2b77ea798e746bc1d6c8d2a3f22d298325698625df04cdcf395212212b472e7f8a5fcdd0763a461fc

  • SSDEEP

    3072:t7s0jPAtwjntlQkLcU1WdTCn93OGey/ZhJakrPF:t7sGAQLPLcrTCndOGeKTaG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ad2b5708821c64536d8dda3c7e070c00.exe

    • Size

      125KB

    • MD5

      ad2b5708821c64536d8dda3c7e070c00

    • SHA1

      591ca4c0eec91c1000e79174e702092878dfe58d

    • SHA256

      d63e63e5b4dce68d5eb0a789ea290557ff28187277362fa3781817abb9d0c5e9

    • SHA512

      a7d0aae77cd1d9decdaf839a22e16300a0b8df6915cf20b2b77ea798e746bc1d6c8d2a3f22d298325698625df04cdcf395212212b472e7f8a5fcdd0763a461fc

    • SSDEEP

      3072:t7s0jPAtwjntlQkLcU1WdTCn93OGey/ZhJakrPF:t7sGAQLPLcrTCndOGeKTaG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks