Overview

overview

10

Static

static

10

NEAS.e894d...00.exe

windows7-x64

10

NEAS.e894d...00.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e894ddc4c278caec9e8df5b95fea7c00.exe

  • Size

    380KB

  • Sample

    231103-kmrefaeg7z

  • MD5

    e894ddc4c278caec9e8df5b95fea7c00

  • SHA1

    d036db082e6a0e03ca42b35ef6ff3495e8dfc0bc

  • SHA256

    e7aca67ade74d72103106c4c735c558317debefd9329cbfbb0dfccb688c4fca2

  • SHA512

    ff0fe9b738e2906c12ffd854fbba8fbfe76661a18f77db62a20fdb206e1639a00f2dfbc6dedb4dfe3470a53574be7e158b51b17f696f065ac6c20641f566c7b8

  • SSDEEP

    6144:dUL6jlcBu490ZtTqKCWCsiKJaFM6234lKm3mo8Yvi4KsLTFM6234lKm3cbVs:GOjlYV94tTqxWxi7FB24lwR45FB24lSe

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e894ddc4c278caec9e8df5b95fea7c00.exe

    • Size

      380KB

    • MD5

      e894ddc4c278caec9e8df5b95fea7c00

    • SHA1

      d036db082e6a0e03ca42b35ef6ff3495e8dfc0bc

    • SHA256

      e7aca67ade74d72103106c4c735c558317debefd9329cbfbb0dfccb688c4fca2

    • SHA512

      ff0fe9b738e2906c12ffd854fbba8fbfe76661a18f77db62a20fdb206e1639a00f2dfbc6dedb4dfe3470a53574be7e158b51b17f696f065ac6c20641f566c7b8

    • SSDEEP

      6144:dUL6jlcBu490ZtTqKCWCsiKJaFM6234lKm3mo8Yvi4KsLTFM6234lKm3cbVs:GOjlYV94tTqxWxi7FB24lwR45FB24lSe

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks