Overview

overview

10

Static

static

10

NEAS.d1f76...90.exe

windows7-x64

10

NEAS.d1f76...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d1f76d13ea5a3faec1f6a5c051c18c90.exe

  • Size

    227KB

  • Sample

    231102-vcb7wadb66

  • MD5

    d1f76d13ea5a3faec1f6a5c051c18c90

  • SHA1

    c7b57687460712f64447b0bab1b025149e9e5bd3

  • SHA256

    dc558416f267ccfe69baa77fc4014b97d0fae90aabe50009f902e68bbabbe94f

  • SHA512

    c5aab90a81218147a69f70829eea98d24ef3efc5976c6dbcc3f88eafaf7f549fb19ad22c9acdbea0d92154061a415e2206c7beeae1c2a683f4ac9c4522ab8799

  • SSDEEP

    6144:nYHiTX9h2u+CAbrm7U5j2QE2+g24Id2jFHu:jhWxiojj+Td20

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d1f76d13ea5a3faec1f6a5c051c18c90.exe

    • Size

      227KB

    • MD5

      d1f76d13ea5a3faec1f6a5c051c18c90

    • SHA1

      c7b57687460712f64447b0bab1b025149e9e5bd3

    • SHA256

      dc558416f267ccfe69baa77fc4014b97d0fae90aabe50009f902e68bbabbe94f

    • SHA512

      c5aab90a81218147a69f70829eea98d24ef3efc5976c6dbcc3f88eafaf7f549fb19ad22c9acdbea0d92154061a415e2206c7beeae1c2a683f4ac9c4522ab8799

    • SSDEEP

      6144:nYHiTX9h2u+CAbrm7U5j2QE2+g24Id2jFHu:jhWxiojj+Td20

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks