Overview

overview

10

Static

static

10

NEAS.72e03...b0.exe

windows7-x64

10

NEAS.72e03...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.72e0300a5850e99c043ca4e2b53698b0.exe

  • Size

    8.4MB

  • Sample

    231102-t835ssba54

  • MD5

    72e0300a5850e99c043ca4e2b53698b0

  • SHA1

    093204e7c4d9aa0d6237e68f4800fcf2cab5292f

  • SHA256

    1ca7b67c26a080db7e631706ae73638234d7adca60b9d6ef464d58c9abb7b763

  • SHA512

    21f47214e99cf63c5f31e32f49f1a1e5203f0abb19ed5598f6958ff4e1c9743ec8c941d3f1a42e3a3fa9994b614575d8068cfde4110d55520a4fc0b11d4f29b0

  • SSDEEP

    196608:XaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:XaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.72e0300a5850e99c043ca4e2b53698b0.exe

    • Size

      8.4MB

    • MD5

      72e0300a5850e99c043ca4e2b53698b0

    • SHA1

      093204e7c4d9aa0d6237e68f4800fcf2cab5292f

    • SHA256

      1ca7b67c26a080db7e631706ae73638234d7adca60b9d6ef464d58c9abb7b763

    • SHA512

      21f47214e99cf63c5f31e32f49f1a1e5203f0abb19ed5598f6958ff4e1c9743ec8c941d3f1a42e3a3fa9994b614575d8068cfde4110d55520a4fc0b11d4f29b0

    • SSDEEP

      196608:XaSHFaZRBEYyqmS2DiHPKQgwUgUjvho4wzlF65i6YxE+a6Y:XaSHFaZRBEYyqmS2DiHPKQg3jvZwNVOV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks