Overview

overview

10

Static

static

10

NEAS.b0bef...c0.exe

windows7-x64

10

NEAS.b0bef...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b0befb0b92aa85a1726d08ceaae8f9c0.exe

  • Size

    100KB

  • Sample

    231101-rlxcmaeg9x

  • MD5

    b0befb0b92aa85a1726d08ceaae8f9c0

  • SHA1

    1c7e02b8f577dec691c5d3b963b8ab31b8ab3e5d

  • SHA256

    20cdaba3b5e36019e66643776de835a51573ff5d8ce5727f6e0a56c0ff873162

  • SHA512

    cf4a372beebad5219061ff006eafddd4c29fe07ee50bd6e448d52955016339af205e749b641b957aab88a1d2cde4ae4e7e823dc2bd77e0832a4f2a65666f5271

  • SSDEEP

    1536:Mft7Gle8qVB8eDMUJbD8/ObXEUauavoU88kOkQ3KifYb+VHtR/6WOREN7DVrF8nD:MKehNo/ObYgbUHtR/bOMFR8n5j8YD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b0befb0b92aa85a1726d08ceaae8f9c0.exe

    • Size

      100KB

    • MD5

      b0befb0b92aa85a1726d08ceaae8f9c0

    • SHA1

      1c7e02b8f577dec691c5d3b963b8ab31b8ab3e5d

    • SHA256

      20cdaba3b5e36019e66643776de835a51573ff5d8ce5727f6e0a56c0ff873162

    • SHA512

      cf4a372beebad5219061ff006eafddd4c29fe07ee50bd6e448d52955016339af205e749b641b957aab88a1d2cde4ae4e7e823dc2bd77e0832a4f2a65666f5271

    • SSDEEP

      1536:Mft7Gle8qVB8eDMUJbD8/ObXEUauavoU88kOkQ3KifYb+VHtR/6WOREN7DVrF8nD:MKehNo/ObYgbUHtR/bOMFR8n5j8YD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks