Overview

overview

10

Static

static

10

NEAS.f7463...40.exe

windows7-x64

10

NEAS.f7463...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f74636ec1473360f0333db1de1552440.exe

  • Size

    256KB

  • Sample

    231103-rr4c5acd8v

  • MD5

    f74636ec1473360f0333db1de1552440

  • SHA1

    52016651b8683708004d981c514e3f907cd54c49

  • SHA256

    2a759787d0284b1a3884b3d0cdcd54249b7f0edae6bdf02ff53ef01d085d0bb5

  • SHA512

    dc345e19267c176f4cc5de22ebb932fffba911b46ca6d68248330187c85b17657535586c52b89cab118de7fe55eb9fb09e1ece5f0a4913c2108fa07ab227b756

  • SSDEEP

    6144:nTMT0f+T4rQD85k/hQO+zrWnAdqjeOpKfduBU:noT0jrQg5W/+zrWAI5KFuU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f74636ec1473360f0333db1de1552440.exe

    • Size

      256KB

    • MD5

      f74636ec1473360f0333db1de1552440

    • SHA1

      52016651b8683708004d981c514e3f907cd54c49

    • SHA256

      2a759787d0284b1a3884b3d0cdcd54249b7f0edae6bdf02ff53ef01d085d0bb5

    • SHA512

      dc345e19267c176f4cc5de22ebb932fffba911b46ca6d68248330187c85b17657535586c52b89cab118de7fe55eb9fb09e1ece5f0a4913c2108fa07ab227b756

    • SSDEEP

      6144:nTMT0f+T4rQD85k/hQO+zrWnAdqjeOpKfduBU:noT0jrQg5W/+zrWAI5KFuU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks