Overview

overview

10

Static

static

10

NEAS.885e8...f0.exe

windows7-x64

10

NEAS.885e8...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.885e87c9ca07b98e84e67bf2574652f0.exe

  • Size

    67KB

  • Sample

    231103-lhjpgahe93

  • MD5

    885e87c9ca07b98e84e67bf2574652f0

  • SHA1

    85918c2cfd8486b5b5b90916fe2c3453f031a995

  • SHA256

    adab85bf16c950b231b7d5aa96a5e76a955750ee399f5be9a55244bd4e219e66

  • SHA512

    b527e9f5f0810704182b54133d1b7c81c1794b0f175b1cbe9a95c8f51f6526e0a8196cf7dc487f80e7459f14b11eee3b2fa3ac13175349c5a610e9f700dd7393

  • SSDEEP

    768:1uLrL1xjBZXfBcad278etcEDhNPqXBGSAyLLKX/1H5r7EVErME/feYvn1q/D2Zu4:1uLlxtkaAvrV4gVsJifTduD4oTxw

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.885e87c9ca07b98e84e67bf2574652f0.exe

    • Size

      67KB

    • MD5

      885e87c9ca07b98e84e67bf2574652f0

    • SHA1

      85918c2cfd8486b5b5b90916fe2c3453f031a995

    • SHA256

      adab85bf16c950b231b7d5aa96a5e76a955750ee399f5be9a55244bd4e219e66

    • SHA512

      b527e9f5f0810704182b54133d1b7c81c1794b0f175b1cbe9a95c8f51f6526e0a8196cf7dc487f80e7459f14b11eee3b2fa3ac13175349c5a610e9f700dd7393

    • SSDEEP

      768:1uLrL1xjBZXfBcad278etcEDhNPqXBGSAyLLKX/1H5r7EVErME/feYvn1q/D2Zu4:1uLlxtkaAvrV4gVsJifTduD4oTxw

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks