Overview

overview

10

Static

static

10

NEAS.b7304...e0.exe

windows7-x64

10

NEAS.b7304...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b7304c8bc0a458ab9e2924240af6cde0.exe

  • Size

    77KB

  • Sample

    231103-m2kxbagg6y

  • MD5

    b7304c8bc0a458ab9e2924240af6cde0

  • SHA1

    1a357fc88368b0f6a0b8ae7c7bc4a002741d8678

  • SHA256

    6412f4f662dbb19b2207e9a47a1d544a70ada9f55a5d8cee1147c7a7bf42f99d

  • SHA512

    6518f0bd1e91778b1e36d4f8a5e5204877195d7feeff3bcbc600eb8bb9480fa2fb842732d288bc7d4411a8e6d04ea4fc3792f14a436a01957d4107fd6c26d2be

  • SSDEEP

    1536:s8w6dQacPQJ3wug6dgiLR2LtJwfi+TjRC/D:s162+JJEiWbwf1TjYD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b7304c8bc0a458ab9e2924240af6cde0.exe

    • Size

      77KB

    • MD5

      b7304c8bc0a458ab9e2924240af6cde0

    • SHA1

      1a357fc88368b0f6a0b8ae7c7bc4a002741d8678

    • SHA256

      6412f4f662dbb19b2207e9a47a1d544a70ada9f55a5d8cee1147c7a7bf42f99d

    • SHA512

      6518f0bd1e91778b1e36d4f8a5e5204877195d7feeff3bcbc600eb8bb9480fa2fb842732d288bc7d4411a8e6d04ea4fc3792f14a436a01957d4107fd6c26d2be

    • SSDEEP

      1536:s8w6dQacPQJ3wug6dgiLR2LtJwfi+TjRC/D:s162+JJEiWbwf1TjYD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks