Overview

overview

10

Static

static

10

NEAS.9465b...95.exe

windows7-x64

10

NEAS.9465b...95.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.9465bb7b5ecc190c83b7ff2130ca7b95.exe

  • Size

    367KB

  • Sample

    231101-kcvn4sfc68

  • MD5

    9465bb7b5ecc190c83b7ff2130ca7b95

  • SHA1

    d8307ffbff71486aec3c9ad780bf21efc6a8276c

  • SHA256

    426018fd4c1d6fdd2eaf1c305f89577987a2287077066e8b20a4c1bb8d754313

  • SHA512

    5426655ef171ff2bfcb32f0291d837292c9e7c1e7c418767f19fb2c400ce9714982658fce5e1ab7a35d9c53896edd73babb45050c92d8a21bf8ce699c15c4afb

  • SSDEEP

    6144:6JjaNcgC7tnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:6JjbtJCXqP77D7FB24lwR45FB24lqM

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.9465bb7b5ecc190c83b7ff2130ca7b95.exe

    • Size

      367KB

    • MD5

      9465bb7b5ecc190c83b7ff2130ca7b95

    • SHA1

      d8307ffbff71486aec3c9ad780bf21efc6a8276c

    • SHA256

      426018fd4c1d6fdd2eaf1c305f89577987a2287077066e8b20a4c1bb8d754313

    • SHA512

      5426655ef171ff2bfcb32f0291d837292c9e7c1e7c418767f19fb2c400ce9714982658fce5e1ab7a35d9c53896edd73babb45050c92d8a21bf8ce699c15c4afb

    • SSDEEP

      6144:6JjaNcgC7tnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:6JjbtJCXqP77D7FB24lwR45FB24lqM

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks