Overview

overview

10

Static

static

10

NEAS.64b9b...20.exe

windows7-x64

10

NEAS.64b9b...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.64b9badebb5effbc84ee6aa10e835120.exe

  • Size

    89KB

  • Sample

    231101-g967madg93

  • MD5

    64b9badebb5effbc84ee6aa10e835120

  • SHA1

    67ebfa0efcc6a5c7ac70283e81c0f7addf282061

  • SHA256

    54130018edb627e36322351fec0caf831d97a1ac77deb2bfe91aa636b3990bec

  • SHA512

    ba09f557d12dc5b1caa09896986580b8bcae994a5afb188e5683c7a638a27df53971a7a44b8436c76bd8b5191e64dbcf4f35fac8a093f97aab347ce25831ff4e

  • SSDEEP

    1536:dU92/gKqclW1zNQgN8C368xJnXT6lM7uK/9dYhCoR6EMhgCKFcclExkg8Fk:d3IKqcliTNhj6l1K/9mCoRKS5cclakgN

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.64b9badebb5effbc84ee6aa10e835120.exe

    • Size

      89KB

    • MD5

      64b9badebb5effbc84ee6aa10e835120

    • SHA1

      67ebfa0efcc6a5c7ac70283e81c0f7addf282061

    • SHA256

      54130018edb627e36322351fec0caf831d97a1ac77deb2bfe91aa636b3990bec

    • SHA512

      ba09f557d12dc5b1caa09896986580b8bcae994a5afb188e5683c7a638a27df53971a7a44b8436c76bd8b5191e64dbcf4f35fac8a093f97aab347ce25831ff4e

    • SSDEEP

      1536:dU92/gKqclW1zNQgN8C368xJnXT6lM7uK/9dYhCoR6EMhgCKFcclExkg8Fk:d3IKqcliTNhj6l1K/9mCoRKS5cclakgN

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks