Overview

overview

10

Static

static

10

NEAS.50a49...40.exe

windows7-x64

10

NEAS.50a49...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.50a4952b2c2e43519758012bfe997440.exe

  • Size

    125KB

  • Sample

    231102-t78nwsgd9x

  • MD5

    50a4952b2c2e43519758012bfe997440

  • SHA1

    b01db813b0888d8ff2deae9e519598c60901fa25

  • SHA256

    3463b4e1f3a78c1f4013dc9f0ea96c843134c84f8be8624a1541138139ac16b9

  • SHA512

    32e23a548b86809b85c048b32a11fa8fe8208600461d8ff4644b49a3f09a94ef80670958e281dfdc6834204bed65cabd2d64eea2d2de940ae452e8c600231f59

  • SSDEEP

    3072:LwiboEOCWKuh7fGVLJcH1WdTCn93OGey/ZhJakrPF:LboE3qfGLc4TCndOGeKTaG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.50a4952b2c2e43519758012bfe997440.exe

    • Size

      125KB

    • MD5

      50a4952b2c2e43519758012bfe997440

    • SHA1

      b01db813b0888d8ff2deae9e519598c60901fa25

    • SHA256

      3463b4e1f3a78c1f4013dc9f0ea96c843134c84f8be8624a1541138139ac16b9

    • SHA512

      32e23a548b86809b85c048b32a11fa8fe8208600461d8ff4644b49a3f09a94ef80670958e281dfdc6834204bed65cabd2d64eea2d2de940ae452e8c600231f59

    • SSDEEP

      3072:LwiboEOCWKuh7fGVLJcH1WdTCn93OGey/ZhJakrPF:LboE3qfGLc4TCndOGeKTaG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks