Overview

overview

10

Static

static

10

NEAS.d78c5...30.exe

windows7-x64

10

NEAS.d78c5...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d78c5b36dff06f65874676f500260e30.exe

  • Size

    302KB

  • Sample

    231101-rn53jshh87

  • MD5

    d78c5b36dff06f65874676f500260e30

  • SHA1

    628013356f9d9e73228336e9333d0c3ba19aab9e

  • SHA256

    10afae2e79c4f5741a83a69e4ce06dda9ada8a46217b4af76aa4f33af0fe65c6

  • SHA512

    a435791b3db1437e137063d00131a5b6b58b9086fbcc62380eca3981f69126fe4e8def4a19b658eaf8c7050be8811fdc5eb0ea2da4eadab8df5603aefb8c05fc

  • SSDEEP

    6144:Zi5Lnf+g7+TvUrTL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:Z+f17+Tmv8lXhuT9XvEhdfEmwlY1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d78c5b36dff06f65874676f500260e30.exe

    • Size

      302KB

    • MD5

      d78c5b36dff06f65874676f500260e30

    • SHA1

      628013356f9d9e73228336e9333d0c3ba19aab9e

    • SHA256

      10afae2e79c4f5741a83a69e4ce06dda9ada8a46217b4af76aa4f33af0fe65c6

    • SHA512

      a435791b3db1437e137063d00131a5b6b58b9086fbcc62380eca3981f69126fe4e8def4a19b658eaf8c7050be8811fdc5eb0ea2da4eadab8df5603aefb8c05fc

    • SSDEEP

      6144:Zi5Lnf+g7+TvUrTL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:Z+f17+Tmv8lXhuT9XvEhdfEmwlY1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks