Overview

overview

10

Static

static

10

NEAS.db617...30.exe

windows7-x64

10

NEAS.db617...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.db6178b59b565c8a07938d5d16cda330.exe

  • Size

    438KB

  • Sample

    231102-h847baag72

  • MD5

    db6178b59b565c8a07938d5d16cda330

  • SHA1

    436d3b8cfacb175302fed5a5d8af705143e4c1eb

  • SHA256

    09a9d1f182aa42cf63147632d9e64beaada4a471d488311393f6ebaec09a9a27

  • SHA512

    2696b07380a9f2760b46944b034d39d196bf73e000922316f4af371c6b04a885b8459ffb095566be3dd6bd331d47e28b404b07fa7a840cbfd2070f6f02e770f0

  • SSDEEP

    12288:mTYapJoTYapbt1S3vwyjrU+LKYAJIIfvBN7wWubiFpcxK9:knJunbt1S3vwyjrU+LKYAJIIfvBN7wW9

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.db6178b59b565c8a07938d5d16cda330.exe

    • Size

      438KB

    • MD5

      db6178b59b565c8a07938d5d16cda330

    • SHA1

      436d3b8cfacb175302fed5a5d8af705143e4c1eb

    • SHA256

      09a9d1f182aa42cf63147632d9e64beaada4a471d488311393f6ebaec09a9a27

    • SHA512

      2696b07380a9f2760b46944b034d39d196bf73e000922316f4af371c6b04a885b8459ffb095566be3dd6bd331d47e28b404b07fa7a840cbfd2070f6f02e770f0

    • SSDEEP

      12288:mTYapJoTYapbt1S3vwyjrU+LKYAJIIfvBN7wWubiFpcxK9:knJunbt1S3vwyjrU+LKYAJIIfvBN7wW9

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks