Overview

overview

10

Static

static

10

NEAS.a2053...d1.exe

windows7-x64

10

NEAS.a2053...d1.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a20531e8736df58044059ec704fc97d1.exe

  • Size

    128KB

  • Sample

    231101-kczm3afd24

  • MD5

    a20531e8736df58044059ec704fc97d1

  • SHA1

    b67424fe500730ce053814ca63659f686f591753

  • SHA256

    27889286262a5c32e7befaf66c31cdcf36d7daaa5c06fb5c509b15c5ff23b4a2

  • SHA512

    1791230ef11151aac530d9cc078744e56039ae5c561405fe3d6c64207e7ddc82d937aa694801ee115e6e215acc45979956514b4146c64cab9b09e612e922f590

  • SSDEEP

    3072:04RgeE5X2695U9+kDd1AZoUBW3FJeRuaWNXmgu+tB:0jxm4m9+WdWZHEFJ7aWN1B

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a20531e8736df58044059ec704fc97d1.exe

    • Size

      128KB

    • MD5

      a20531e8736df58044059ec704fc97d1

    • SHA1

      b67424fe500730ce053814ca63659f686f591753

    • SHA256

      27889286262a5c32e7befaf66c31cdcf36d7daaa5c06fb5c509b15c5ff23b4a2

    • SHA512

      1791230ef11151aac530d9cc078744e56039ae5c561405fe3d6c64207e7ddc82d937aa694801ee115e6e215acc45979956514b4146c64cab9b09e612e922f590

    • SSDEEP

      3072:04RgeE5X2695U9+kDd1AZoUBW3FJeRuaWNXmgu+tB:0jxm4m9+WdWZHEFJ7aWN1B

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks