Overview

overview

10

Static

static

10

NEAS.f6bbc...b3.exe

windows7-x64

10

NEAS.f6bbc...b3.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f6bbc8a926005237ede30beaadb087b3.exe

  • Size

    83KB

  • Sample

    231101-kdts7sfg97

  • MD5

    f6bbc8a926005237ede30beaadb087b3

  • SHA1

    7b391aadf259e7b80bf087d857603668d3a0e4da

  • SHA256

    a017382560a0b43353188cdb78999b6e681e672276d3252ac4c4bb6f700f0af5

  • SHA512

    e73a3fb42b121cb12d3e9824125136b77b7f423a82740041f4a84f2a33c6b8361d86c2d3e1dd0a9505cd5c2fd55975053dba228fd067dff82d7848bc95d9a650

  • SSDEEP

    1536:6Gbf8Uci6mE5L0q1Nmil8xLjEysn55qja2FRQSRRLRARxRKR2GNIwuHDDNH:6Qr6mEVLys8xLjK55qj3eSRNmXo4G4FH

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f6bbc8a926005237ede30beaadb087b3.exe

    • Size

      83KB

    • MD5

      f6bbc8a926005237ede30beaadb087b3

    • SHA1

      7b391aadf259e7b80bf087d857603668d3a0e4da

    • SHA256

      a017382560a0b43353188cdb78999b6e681e672276d3252ac4c4bb6f700f0af5

    • SHA512

      e73a3fb42b121cb12d3e9824125136b77b7f423a82740041f4a84f2a33c6b8361d86c2d3e1dd0a9505cd5c2fd55975053dba228fd067dff82d7848bc95d9a650

    • SSDEEP

      1536:6Gbf8Uci6mE5L0q1Nmil8xLjEysn55qja2FRQSRRLRARxRKR2GNIwuHDDNH:6Qr6mEVLys8xLjK55qj3eSRNmXo4G4FH

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks