Overview

overview

10

Static

static

10

NEAS.d2512...40.exe

windows7-x64

10

NEAS.d2512...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d25129dfad050228ccc2a6572c195b40.exe

  • Size

    305KB

  • Sample

    231101-rntdragb5t

  • MD5

    d25129dfad050228ccc2a6572c195b40

  • SHA1

    5d8fed39d448df54a2d26849ffb2d065e9c7cd4e

  • SHA256

    fb7dc7cd2ce60ad53cf0b296d017df45ee29bd7dee5b891a969d44fcafd72d51

  • SHA512

    80054980d97e03a941e9c603f56a40ec6aa52473606baab327ecbc3d11e021476af070ec42c165da948306f1edcc557e030abff5dc63c85545db8f7be777e91d

  • SSDEEP

    6144:Wj70v0AGNxunXe8yhrtMsQBvli+RQFdq:Wj70evAO8qRMsrOQF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d25129dfad050228ccc2a6572c195b40.exe

    • Size

      305KB

    • MD5

      d25129dfad050228ccc2a6572c195b40

    • SHA1

      5d8fed39d448df54a2d26849ffb2d065e9c7cd4e

    • SHA256

      fb7dc7cd2ce60ad53cf0b296d017df45ee29bd7dee5b891a969d44fcafd72d51

    • SHA512

      80054980d97e03a941e9c603f56a40ec6aa52473606baab327ecbc3d11e021476af070ec42c165da948306f1edcc557e030abff5dc63c85545db8f7be777e91d

    • SSDEEP

      6144:Wj70v0AGNxunXe8yhrtMsQBvli+RQFdq:Wj70evAO8qRMsrOQF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks