Overview

overview

10

Static

static

10

NEAS.78478...e0.exe

windows7-x64

10

NEAS.78478...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.78478fad1c01287291c7c66d96e4f8e0.exe

  • Size

    347KB

  • Sample

    231101-rh4mjaeh57

  • MD5

    78478fad1c01287291c7c66d96e4f8e0

  • SHA1

    e3528a771e6305a0551a258023f695cec1b955f9

  • SHA256

    3cd564ddf745bcde40074ca917f8bee41569012d66e8302636ed5479acb27853

  • SHA512

    abbd280249e69e9f75e25de853c034af26ae5f53ecb8efb0992e6e59c2a3c24422a7241f024045a0bbcd00bdc8db4fd536481bb44efeaba82eb6b66c1c142c29

  • SSDEEP

    6144:Hn1Ljt5ox4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:H1/sx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.78478fad1c01287291c7c66d96e4f8e0.exe

    • Size

      347KB

    • MD5

      78478fad1c01287291c7c66d96e4f8e0

    • SHA1

      e3528a771e6305a0551a258023f695cec1b955f9

    • SHA256

      3cd564ddf745bcde40074ca917f8bee41569012d66e8302636ed5479acb27853

    • SHA512

      abbd280249e69e9f75e25de853c034af26ae5f53ecb8efb0992e6e59c2a3c24422a7241f024045a0bbcd00bdc8db4fd536481bb44efeaba82eb6b66c1c142c29

    • SSDEEP

      6144:Hn1Ljt5ox4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:H1/sx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks