Overview

overview

10

Static

static

10

NEAS.bb928...90.exe

windows7-x64

10

NEAS.bb928...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bb928d50229afb30fde414dc2d1c3d90.exe

  • Size

    345KB

  • Sample

    231101-rmkefsfc21

  • MD5

    bb928d50229afb30fde414dc2d1c3d90

  • SHA1

    ab33447c838bf25747108e5c5544048e1fbe9c90

  • SHA256

    f637453efe1bad0cec11f0493967c58d7e09c2013978e0118e245b276b4f4b69

  • SHA512

    852ebd6c226ed486217a16b1ee1400bbbc19b0e26ec12c5905a80c7bfe363a3d3a5597d4c6fce173e846e930cad52089ec3556db6703cfa389dd01367b4439ba

  • SSDEEP

    6144:3BPO92zgMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:R292U1uznghoaHACwBkka8eGp7dPRr6G

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bb928d50229afb30fde414dc2d1c3d90.exe

    • Size

      345KB

    • MD5

      bb928d50229afb30fde414dc2d1c3d90

    • SHA1

      ab33447c838bf25747108e5c5544048e1fbe9c90

    • SHA256

      f637453efe1bad0cec11f0493967c58d7e09c2013978e0118e245b276b4f4b69

    • SHA512

      852ebd6c226ed486217a16b1ee1400bbbc19b0e26ec12c5905a80c7bfe363a3d3a5597d4c6fce173e846e930cad52089ec3556db6703cfa389dd01367b4439ba

    • SSDEEP

      6144:3BPO92zgMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:R292U1uznghoaHACwBkka8eGp7dPRr6G

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks