Overview

overview

10

Static

static

10

NEAS.b1b22...40.exe

windows7-x64

10

NEAS.b1b22...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b1b227baf4879a67457acd5363582a40.exe

  • Size

    121KB

  • Sample

    231101-rlywfsge66

  • MD5

    b1b227baf4879a67457acd5363582a40

  • SHA1

    9dcb715fc773d1bfc5b70bd4204344b0792b9ec7

  • SHA256

    684ae28577b25938c50d9a72e108f1606235b67d09f7d2d2c2c5aed65c0674d5

  • SHA512

    19774f78fb6ad9aad45f67b4f1830bce758241db76fbe83068494f893b66e79fb968dccd2a44224a7794c5a425b755485537e97751630bdb8a346b4e62c07be2

  • SSDEEP

    3072:6Hl8qomVl/xJwUrEDL1Y2PLK7XOqHnnXWRg3kH3v7GzxO7AJnD5tvv:O9VjHiu7+qHnms236zxOarvv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b1b227baf4879a67457acd5363582a40.exe

    • Size

      121KB

    • MD5

      b1b227baf4879a67457acd5363582a40

    • SHA1

      9dcb715fc773d1bfc5b70bd4204344b0792b9ec7

    • SHA256

      684ae28577b25938c50d9a72e108f1606235b67d09f7d2d2c2c5aed65c0674d5

    • SHA512

      19774f78fb6ad9aad45f67b4f1830bce758241db76fbe83068494f893b66e79fb968dccd2a44224a7794c5a425b755485537e97751630bdb8a346b4e62c07be2

    • SSDEEP

      3072:6Hl8qomVl/xJwUrEDL1Y2PLK7XOqHnnXWRg3kH3v7GzxO7AJnD5tvv:O9VjHiu7+qHnms236zxOarvv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks