Overview

overview

10

Static

static

10

NEAS.0875b...50.exe

windows7-x64

10

NEAS.0875b...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0875b4d05822326ad83240dfeba66050.exe

  • Size

    125KB

  • Sample

    231102-t2seqafc2z

  • MD5

    0875b4d05822326ad83240dfeba66050

  • SHA1

    cd8179d7d002c4ff0b46f7c1c3e8ea2887c51dea

  • SHA256

    704981dd38f599deace368d28c176f49410b32f30bf9d196a0a0114e64033d6e

  • SHA512

    599c22ebe77d8e75381a2160158f2915c87eef65193d665d7868b852778da31ea919b768899075e8075743cee53eb3d400ee34b0c0b82112a23a500231299158

  • SSDEEP

    3072:k6/SUnHbLRvcXKHWScn1WdTCn93OGey/ZhJakrPF:iUHbRWaWScYTCndOGeKTaG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0875b4d05822326ad83240dfeba66050.exe

    • Size

      125KB

    • MD5

      0875b4d05822326ad83240dfeba66050

    • SHA1

      cd8179d7d002c4ff0b46f7c1c3e8ea2887c51dea

    • SHA256

      704981dd38f599deace368d28c176f49410b32f30bf9d196a0a0114e64033d6e

    • SHA512

      599c22ebe77d8e75381a2160158f2915c87eef65193d665d7868b852778da31ea919b768899075e8075743cee53eb3d400ee34b0c0b82112a23a500231299158

    • SSDEEP

      3072:k6/SUnHbLRvcXKHWScn1WdTCn93OGey/ZhJakrPF:iUHbRWaWScYTCndOGeKTaG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks