Overview

overview

10

Static

static

10

NEAS.1a268...50.exe

windows7-x64

10

NEAS.1a268...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1a268aca13c1eec46025fcacfe06d050.exe

  • Size

    374KB

  • Sample

    231102-t6zplahe93

  • MD5

    1a268aca13c1eec46025fcacfe06d050

  • SHA1

    59e022a5aeec53f33b1d9e89e77c36d2dee86f86

  • SHA256

    12468ddd3adc4a858e03bc6b8d248cb54897fe816922124d9ec5b5f7d4433cf5

  • SHA512

    f023f70d9dff69e1c5d9e7065f6f956e18ab5fec3824594977b4e43003704c805b77f157ee8cdcf759dd2c9f1a6f82d7761a83f33b0cee85767b719acdb16507

  • SSDEEP

    6144:B43h189tqph+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:S3h189Y7E6uidyzwr6AxfLeI1Su63lg/

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.1a268aca13c1eec46025fcacfe06d050.exe

    • Size

      374KB

    • MD5

      1a268aca13c1eec46025fcacfe06d050

    • SHA1

      59e022a5aeec53f33b1d9e89e77c36d2dee86f86

    • SHA256

      12468ddd3adc4a858e03bc6b8d248cb54897fe816922124d9ec5b5f7d4433cf5

    • SHA512

      f023f70d9dff69e1c5d9e7065f6f956e18ab5fec3824594977b4e43003704c805b77f157ee8cdcf759dd2c9f1a6f82d7761a83f33b0cee85767b719acdb16507

    • SSDEEP

      6144:B43h189tqph+Eu6QnFw5+0pU8oStTf3runG/qoxfIkeI1SHkF63lngMBdkw8ZF+Y:S3h189Y7E6uidyzwr6AxfLeI1Su63lg/

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks