Overview

overview

10

Static

static

10

NEAS.a1243...7c.exe

windows7-x64

10

NEAS.a1243...7c.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a1243b3d5364d587cf1be8d9db9fbb7c.exe

  • Size

    276KB

  • Sample

    231101-kcy2jadc8y

  • MD5

    a1243b3d5364d587cf1be8d9db9fbb7c

  • SHA1

    a724d610a20374bbdc2835d4be774a1b1d960440

  • SHA256

    678ef888d2b4339a0c086a19d1673ac12a55679cac2ec69d08e568e609fd51b5

  • SHA512

    2aa5e8c8fc27bf0ba708fb59df1f3df24a02fb48520dfa025afd656894f78037b1df28d5d1fb1249f34c5e3b711d4a52a3bbb92ce0dbe86fe27f1cdd97bbe62c

  • SSDEEP

    6144:cwNHtaFjf2/SlUdWZHEFJ7aWN1rtMsQBOSGaF+:cwNkReB2HEGWN1RMs1S7

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a1243b3d5364d587cf1be8d9db9fbb7c.exe

    • Size

      276KB

    • MD5

      a1243b3d5364d587cf1be8d9db9fbb7c

    • SHA1

      a724d610a20374bbdc2835d4be774a1b1d960440

    • SHA256

      678ef888d2b4339a0c086a19d1673ac12a55679cac2ec69d08e568e609fd51b5

    • SHA512

      2aa5e8c8fc27bf0ba708fb59df1f3df24a02fb48520dfa025afd656894f78037b1df28d5d1fb1249f34c5e3b711d4a52a3bbb92ce0dbe86fe27f1cdd97bbe62c

    • SSDEEP

      6144:cwNHtaFjf2/SlUdWZHEFJ7aWN1rtMsQBOSGaF+:cwNkReB2HEGWN1RMs1S7

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks