Overview

overview

10

Static

static

10

NEAS.17d57...a0.exe

windows7-x64

10

NEAS.17d57...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.17d572a78c32d11d2640b0ca664821a0.exe

  • Size

    161KB

  • Sample

    231102-t6x6rshe68

  • MD5

    17d572a78c32d11d2640b0ca664821a0

  • SHA1

    14a5de0b3ddf10466013dad0c0e7077f13010a32

  • SHA256

    556158fa1306dd6adc9c8c34a1fe461aeeca9d80394c05d0757eda0569fe9fd6

  • SHA512

    41c0173ad6c88533b9e9a7e6163bf8880f89e9782c8acdcd78c3ffd1e5a038b70ed1db79a85f477e2d79124f8cee462ed490b6286c2f31e7fa4629796d619ff2

  • SSDEEP

    3072:HxpUMuyg3vLRf3FzjYAfkcVwtCJXeex7rrIRZK8K8/kv:H3UDy4Vfx7kcVwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.17d572a78c32d11d2640b0ca664821a0.exe

    • Size

      161KB

    • MD5

      17d572a78c32d11d2640b0ca664821a0

    • SHA1

      14a5de0b3ddf10466013dad0c0e7077f13010a32

    • SHA256

      556158fa1306dd6adc9c8c34a1fe461aeeca9d80394c05d0757eda0569fe9fd6

    • SHA512

      41c0173ad6c88533b9e9a7e6163bf8880f89e9782c8acdcd78c3ffd1e5a038b70ed1db79a85f477e2d79124f8cee462ed490b6286c2f31e7fa4629796d619ff2

    • SSDEEP

      3072:HxpUMuyg3vLRf3FzjYAfkcVwtCJXeex7rrIRZK8K8/kv:H3UDy4Vfx7kcVwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks