Overview

overview

10

Static

static

10

NEAS.f8309...c0.exe

windows7-x64

10

NEAS.f8309...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f83095d302e413bfcf33ccc77f7081c0.exe

  • Size

    176KB

  • Sample

    231102-vdwynscb8y

  • MD5

    f83095d302e413bfcf33ccc77f7081c0

  • SHA1

    98c475f679b80388e31ca0e612a9be64b3f604ec

  • SHA256

    a7f9d210161a8439eb06828220ee5f6f18a741893477385829f37744e2d75bba

  • SHA512

    980bbdfcfe5a3e9162932600937670e820b4a1d6e8547d3fd91f5052ba5def624e4c40742b661e25a23ac6d6f6ac3371d09a2b34a64b1b467d8be965e59027ea

  • SSDEEP

    3072:rITQtRPMw2rfho5bZT1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIcka:LtRPMXcZT1nTZ9EaUn4yjK99QQd

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f83095d302e413bfcf33ccc77f7081c0.exe

    • Size

      176KB

    • MD5

      f83095d302e413bfcf33ccc77f7081c0

    • SHA1

      98c475f679b80388e31ca0e612a9be64b3f604ec

    • SHA256

      a7f9d210161a8439eb06828220ee5f6f18a741893477385829f37744e2d75bba

    • SHA512

      980bbdfcfe5a3e9162932600937670e820b4a1d6e8547d3fd91f5052ba5def624e4c40742b661e25a23ac6d6f6ac3371d09a2b34a64b1b467d8be965e59027ea

    • SSDEEP

      3072:rITQtRPMw2rfho5bZT1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIcka:LtRPMXcZT1nTZ9EaUn4yjK99QQd

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks