Overview

overview

10

Static

static

10

NEAS.7fabe...4b.exe

windows7-x64

10

NEAS.7fabe...4b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.7fabe1227da6419f12c98ac27e48664b.exe

  • Size

    256KB

  • Sample

    231101-kcrbpadb9y

  • MD5

    7fabe1227da6419f12c98ac27e48664b

  • SHA1

    a83b8c605a7ec20e6e0148a2127d0d1ddc40348b

  • SHA256

    a04b06c84a07c20e500fc91eea19067dedda56aa65af931b87b3fb2e3db27101

  • SHA512

    fbb6901597188127cfda06ed3fad431b2136d314a9e3ff04daf2a055919325f831ec5df06b8e693c179fd38d55902d71975e77aaad9254b1b8c17907c34fa13e

  • SSDEEP

    6144:8TfWAjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:H2lpJxifbWGRdA6sQhPbWGRdA6sQxU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.7fabe1227da6419f12c98ac27e48664b.exe

    • Size

      256KB

    • MD5

      7fabe1227da6419f12c98ac27e48664b

    • SHA1

      a83b8c605a7ec20e6e0148a2127d0d1ddc40348b

    • SHA256

      a04b06c84a07c20e500fc91eea19067dedda56aa65af931b87b3fb2e3db27101

    • SHA512

      fbb6901597188127cfda06ed3fad431b2136d314a9e3ff04daf2a055919325f831ec5df06b8e693c179fd38d55902d71975e77aaad9254b1b8c17907c34fa13e

    • SSDEEP

      6144:8TfWAjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:H2lpJxifbWGRdA6sQhPbWGRdA6sQxU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks