Overview

overview

10

Static

static

10

NEAS.e50db...20.exe

windows7-x64

10

NEAS.e50db...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e50db166702300fe37910e272f9f7d20.exe

  • Size

    128KB

  • Sample

    231102-j9yxcsbd72

  • MD5

    e50db166702300fe37910e272f9f7d20

  • SHA1

    bf1e8501d5c63f6f4a394af43d80029ac9092ee9

  • SHA256

    73ee975acafc1315976e0a0247664410f1676220123727b264fb1779fc66e2dd

  • SHA512

    a1ea0facb456c2b68b16cca22af2247d7bc9e45b286f1c9beb7c46888113d7b4a5f228c7b392b585eb7413d7a32ea357f4d5e36c61c29f144559b9b846dd3ee4

  • SSDEEP

    3072:0HUhVNatI9tnKdf2Dd1AZoUBW3FJeRuaWNXmgu+tB:0HUX4UdWZHEFJ7aWN1B

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e50db166702300fe37910e272f9f7d20.exe

    • Size

      128KB

    • MD5

      e50db166702300fe37910e272f9f7d20

    • SHA1

      bf1e8501d5c63f6f4a394af43d80029ac9092ee9

    • SHA256

      73ee975acafc1315976e0a0247664410f1676220123727b264fb1779fc66e2dd

    • SHA512

      a1ea0facb456c2b68b16cca22af2247d7bc9e45b286f1c9beb7c46888113d7b4a5f228c7b392b585eb7413d7a32ea357f4d5e36c61c29f144559b9b846dd3ee4

    • SSDEEP

      3072:0HUhVNatI9tnKdf2Dd1AZoUBW3FJeRuaWNXmgu+tB:0HUX4UdWZHEFJ7aWN1B

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks