Overview

overview

10

Static

static

10

NEAS.b2529...50.exe

windows7-x64

10

NEAS.b2529...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b25291e71d5451941faea27532439b50.exe

  • Size

    379KB

  • Sample

    231103-jmz6xagb24

  • MD5

    b25291e71d5451941faea27532439b50

  • SHA1

    aea9150b36d0fd0d1815ac03e71e8c4fd5ae9939

  • SHA256

    dba91e1eb3816f3170d344b408b3c922be83300b6bd19211955240e2ad4cd216

  • SHA512

    c62f6c2786838e404526c24683dba25acdd77d6b026da7ba2b4f27d20df7be251958ae44f2d9dcbac5d197f3d4e3c51cb8ef06aa6cb48698b950dc8d2c123f6e

  • SSDEEP

    6144:2huFzu5IlPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsb:RFa+uqFHRFbeE8m5s

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b25291e71d5451941faea27532439b50.exe

    • Size

      379KB

    • MD5

      b25291e71d5451941faea27532439b50

    • SHA1

      aea9150b36d0fd0d1815ac03e71e8c4fd5ae9939

    • SHA256

      dba91e1eb3816f3170d344b408b3c922be83300b6bd19211955240e2ad4cd216

    • SHA512

      c62f6c2786838e404526c24683dba25acdd77d6b026da7ba2b4f27d20df7be251958ae44f2d9dcbac5d197f3d4e3c51cb8ef06aa6cb48698b950dc8d2c123f6e

    • SSDEEP

      6144:2huFzu5IlPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsb:RFa+uqFHRFbeE8m5s

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks