Overview

overview

10

Static

static

10

NEAS.0b5bc...40.exe

windows7-x64

10

NEAS.0b5bc...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0b5bc2e0f4e53509b54d417cdd9f4d40.exe

  • Size

    133KB

  • Sample

    231101-gygslade79

  • MD5

    0b5bc2e0f4e53509b54d417cdd9f4d40

  • SHA1

    5b1d336a06913ac4bbe883510f2d1ad7dc601c2b

  • SHA256

    c47f4971cd8860b84059a3eb68b0f36e1f59246e213264519755144d306482fd

  • SHA512

    2ae0ce7f49158e9d55a0ca6ebac1c42eee24e17219ed642e525479847090042b656b0c4a36564dc69ac205e94a2f5dce4528bb6565aea66e2f5ec1c047412031

  • SSDEEP

    1536:8mhbBf/78U482kt32zqQjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZ95whDFG:7zp4ct32zZKG7UDd0pCrQIFdFtLwzTa

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0b5bc2e0f4e53509b54d417cdd9f4d40.exe

    • Size

      133KB

    • MD5

      0b5bc2e0f4e53509b54d417cdd9f4d40

    • SHA1

      5b1d336a06913ac4bbe883510f2d1ad7dc601c2b

    • SHA256

      c47f4971cd8860b84059a3eb68b0f36e1f59246e213264519755144d306482fd

    • SHA512

      2ae0ce7f49158e9d55a0ca6ebac1c42eee24e17219ed642e525479847090042b656b0c4a36564dc69ac205e94a2f5dce4528bb6565aea66e2f5ec1c047412031

    • SSDEEP

      1536:8mhbBf/78U482kt32zqQjILQ9FKGXllUDtM60TD4ruhiZlrQIFiglF9xZ95whDFG:7zp4ct32zZKG7UDd0pCrQIFdFtLwzTa

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks