Overview

overview

10

Static

static

10

NEAS.ee06c...10.exe

windows7-x64

10

NEAS.ee06c...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ee06c9d1464cbac79d0422aefa41b510.exe

  • Size

    67KB

  • Sample

    231101-fh99jaaf61

  • MD5

    ee06c9d1464cbac79d0422aefa41b510

  • SHA1

    36d6f9b9f8e651170c5c3d56dae41a8a2d997be3

  • SHA256

    de31b26b1d577d05ca1875cb342177aff0af0049aa5c548b76f355f793579d17

  • SHA512

    242506992a08e7dcef828296802591031a9a97a97cb3d226278256c7a07ad43de155c1c85f5ed7fcc5cf539451e315d4db8db8cd4eb0683dfbfe95def8eb7823

  • SSDEEP

    1536:zBokSYyNpQZT3icKkykhefwNkUnasJifTduD4oTxw:zBokSYy7+ycKdkYINpasJibdMTxw

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ee06c9d1464cbac79d0422aefa41b510.exe

    • Size

      67KB

    • MD5

      ee06c9d1464cbac79d0422aefa41b510

    • SHA1

      36d6f9b9f8e651170c5c3d56dae41a8a2d997be3

    • SHA256

      de31b26b1d577d05ca1875cb342177aff0af0049aa5c548b76f355f793579d17

    • SHA512

      242506992a08e7dcef828296802591031a9a97a97cb3d226278256c7a07ad43de155c1c85f5ed7fcc5cf539451e315d4db8db8cd4eb0683dfbfe95def8eb7823

    • SSDEEP

      1536:zBokSYyNpQZT3icKkykhefwNkUnasJifTduD4oTxw:zBokSYy7+ycKdkYINpasJibdMTxw

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks