Overview

overview

10

Static

static

10

NEAS.f1489...f0.exe

windows7-x64

10

NEAS.f1489...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f14896eb9bb972cb46b23308faeb76f0.exe

  • Size

    240KB

  • Sample

    231102-vdmp1aca4t

  • MD5

    f14896eb9bb972cb46b23308faeb76f0

  • SHA1

    8358683514846e5babc446a8aa4152a0750328aa

  • SHA256

    888709df36e7284e5200330a64e1440c28e616c584eafac64ecd6e7e6dd7be74

  • SHA512

    68e678190aa7e1b131907489c84f42e85477cb980185af6d24c20461476e2482103add4782e1de5da3eb2c2e2f1a101a89531f9c7e70a272e87ed2b29bfd4425

  • SSDEEP

    6144:8ueeY8jgoWEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:8ueeY8jTWtycSly8DSUA1YHVD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f14896eb9bb972cb46b23308faeb76f0.exe

    • Size

      240KB

    • MD5

      f14896eb9bb972cb46b23308faeb76f0

    • SHA1

      8358683514846e5babc446a8aa4152a0750328aa

    • SHA256

      888709df36e7284e5200330a64e1440c28e616c584eafac64ecd6e7e6dd7be74

    • SHA512

      68e678190aa7e1b131907489c84f42e85477cb980185af6d24c20461476e2482103add4782e1de5da3eb2c2e2f1a101a89531f9c7e70a272e87ed2b29bfd4425

    • SSDEEP

      6144:8ueeY8jgoWEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:8ueeY8jTWtycSly8DSUA1YHVD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks