Overview

overview

10

Static

static

10

NEAS.42b1c...d0.exe

windows7-x64

10

NEAS.42b1c...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.42b1ce09d8be51b191133b72ade9bed0.exe

  • Size

    177KB

  • Sample

    231101-q94aeadc66

  • MD5

    42b1ce09d8be51b191133b72ade9bed0

  • SHA1

    47ca734ac2a7c9498845e0c1061ca129978c2935

  • SHA256

    5b1ab7fabf9f2418e8d47417ec9209abfd673d5fbec3d431a9abcdaab08bd0be

  • SHA512

    8ab53531da7e039e9b309f8e0999d6419c88c5b5f54bf813074910e144cb423b07c620e753b269e40dbc8285b018731c9db72f6e38e3f16834db17e1a92d7745

  • SSDEEP

    3072:H3/7pUVCWt3n8V+8g3q/haR5sS+vfvLHhjh8g1eGFyOsa:F4CW0+8ga/harSvLHh98gwG0ON

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.42b1ce09d8be51b191133b72ade9bed0.exe

    • Size

      177KB

    • MD5

      42b1ce09d8be51b191133b72ade9bed0

    • SHA1

      47ca734ac2a7c9498845e0c1061ca129978c2935

    • SHA256

      5b1ab7fabf9f2418e8d47417ec9209abfd673d5fbec3d431a9abcdaab08bd0be

    • SHA512

      8ab53531da7e039e9b309f8e0999d6419c88c5b5f54bf813074910e144cb423b07c620e753b269e40dbc8285b018731c9db72f6e38e3f16834db17e1a92d7745

    • SSDEEP

      3072:H3/7pUVCWt3n8V+8g3q/haR5sS+vfvLHhjh8g1eGFyOsa:F4CW0+8ga/harSvLHh98gwG0ON

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks