Overview

overview

10

Static

static

10

NEAS.9676a...c0.exe

windows7-x64

10

NEAS.9676a...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.9676a2f6d5c34032eea5c1f79dc9fec0.exe

  • Size

    269KB

  • Sample

    231103-tcc9haeb4y

  • MD5

    9676a2f6d5c34032eea5c1f79dc9fec0

  • SHA1

    4c793f5adbfe1fbf973ebc87556e719a729f39d5

  • SHA256

    b708fd58ff407e4fedec8a0c3ac0803f1e922b3d86aaa3f3bbb0088369e967d2

  • SHA512

    537252a1d4d841d6fa53492a39fdb632659ea38f6eea433280fa4f6ce963c71788b60741382975eee30691be6e28497cef88c92d57075b7d4afc088c1417478b

  • SSDEEP

    6144:4Q2d7OXDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55Kmj50GXoCcmASBTw2AXC21Y:4Q2dPChtMtkM71r1MSXqPix55KI5fX/Z

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.9676a2f6d5c34032eea5c1f79dc9fec0.exe

    • Size

      269KB

    • MD5

      9676a2f6d5c34032eea5c1f79dc9fec0

    • SHA1

      4c793f5adbfe1fbf973ebc87556e719a729f39d5

    • SHA256

      b708fd58ff407e4fedec8a0c3ac0803f1e922b3d86aaa3f3bbb0088369e967d2

    • SHA512

      537252a1d4d841d6fa53492a39fdb632659ea38f6eea433280fa4f6ce963c71788b60741382975eee30691be6e28497cef88c92d57075b7d4afc088c1417478b

    • SSDEEP

      6144:4Q2d7OXDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55Kmj50GXoCcmASBTw2AXC21Y:4Q2dPChtMtkM71r1MSXqPix55KI5fX/Z

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks