Overview

overview

10

Static

static

10

NEAS.f9112...60.exe

windows7-x64

10

NEAS.f9112...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f911249d977b7afeba1ba1685e6dea60.exe

  • Size

    391KB

  • Sample

    231101-hak1sabf7y

  • MD5

    f911249d977b7afeba1ba1685e6dea60

  • SHA1

    1706c5e0ddaf4280204a02d60c6d94e89a6ea5bd

  • SHA256

    8c02cebd55defea5efc1027a668c6d3125136ce81fbe1160bb5d6f7ad5aa7c13

  • SHA512

    9243f8d21d0ffc1b255558e4a3b867ce521c92245eb1e3fbe5e6b4e1a115b40ba58c77993267f92735550bc6050274dcfff4971cfae6418c4b964a667c8f5dff

  • SSDEEP

    12288:4o56T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:4P9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f911249d977b7afeba1ba1685e6dea60.exe

    • Size

      391KB

    • MD5

      f911249d977b7afeba1ba1685e6dea60

    • SHA1

      1706c5e0ddaf4280204a02d60c6d94e89a6ea5bd

    • SHA256

      8c02cebd55defea5efc1027a668c6d3125136ce81fbe1160bb5d6f7ad5aa7c13

    • SHA512

      9243f8d21d0ffc1b255558e4a3b867ce521c92245eb1e3fbe5e6b4e1a115b40ba58c77993267f92735550bc6050274dcfff4971cfae6418c4b964a667c8f5dff

    • SSDEEP

      12288:4o56T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:4P9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks