Overview

overview

10

Static

static

10

NEAS.e06b1...30.exe

windows7-x64

10

NEAS.e06b1...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e06b12a687979e9e37ce604362b71e30.exe

  • Size

    487KB

  • Sample

    231103-q2rawabe5y

  • MD5

    e06b12a687979e9e37ce604362b71e30

  • SHA1

    1f1074c0acb23786ee0e6b47555580c90b1b96f9

  • SHA256

    41c32e5b6aeca5037abe2f761241ca0f65ac1a6bd21042d1af05b3d19e4cea5d

  • SHA512

    938a49ef0b93c8766bec290197db891f4f8ffd76f07a24c241a7ebf635b9f80e6e46e8c0e91341bf8650bba693479d74ff49ef3c8a3057000e7716aa417d1376

  • SSDEEP

    12288:T0CZpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:RWHWZ0PVdvcY9+8hk5DtJNBcL/C10dqz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e06b12a687979e9e37ce604362b71e30.exe

    • Size

      487KB

    • MD5

      e06b12a687979e9e37ce604362b71e30

    • SHA1

      1f1074c0acb23786ee0e6b47555580c90b1b96f9

    • SHA256

      41c32e5b6aeca5037abe2f761241ca0f65ac1a6bd21042d1af05b3d19e4cea5d

    • SHA512

      938a49ef0b93c8766bec290197db891f4f8ffd76f07a24c241a7ebf635b9f80e6e46e8c0e91341bf8650bba693479d74ff49ef3c8a3057000e7716aa417d1376

    • SSDEEP

      12288:T0CZpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:RWHWZ0PVdvcY9+8hk5DtJNBcL/C10dqz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks