Overview

overview

10

Static

static

10

NEAS.ea34a...80.exe

windows7-x64

10

NEAS.ea34a...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ea34afba0876d41007131357d7598480.exe

  • Size

    235KB

  • Sample

    231101-rqbaysaf94

  • MD5

    ea34afba0876d41007131357d7598480

  • SHA1

    2435264632f757a8f6ac28a249b0a6fed1e06b13

  • SHA256

    b6010ce9674a4a8aa0ee984585b4125146637e2a2c6ddc6341e9f8d1792ca0a0

  • SHA512

    424f5e023b2aac47fd2cfdfe7579946a828f10b763c0da6a7647bafc41cb4f82808916f16f5078920f0b9f9688e6e2fb410adae4f505c22a9b3bd06c40d0a135

  • SSDEEP

    3072:zY5b755bRHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJaW4bI5:u7LbRulrtMsQB+vn87L5A5

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ea34afba0876d41007131357d7598480.exe

    • Size

      235KB

    • MD5

      ea34afba0876d41007131357d7598480

    • SHA1

      2435264632f757a8f6ac28a249b0a6fed1e06b13

    • SHA256

      b6010ce9674a4a8aa0ee984585b4125146637e2a2c6ddc6341e9f8d1792ca0a0

    • SHA512

      424f5e023b2aac47fd2cfdfe7579946a828f10b763c0da6a7647bafc41cb4f82808916f16f5078920f0b9f9688e6e2fb410adae4f505c22a9b3bd06c40d0a135

    • SSDEEP

      3072:zY5b755bRHOVMgu+tAcrbFAJc+RsUi1aVDkOvhJjvJ4vnZy7L5AuJaW4bI5:u7LbRulrtMsQB+vn87L5A5

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks