Overview

overview

10

Static

static

10

NEAS.076a6...c0.exe

windows7-x64

10

NEAS.076a6...c0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.076a66cf12e1f4a0b13897cad5d9bdc0.exe

  • Size

    109KB

  • Sample

    231105-12mykadd5x

  • MD5

    076a66cf12e1f4a0b13897cad5d9bdc0

  • SHA1

    9651ed0713c5f34cc51027e14d1cc5f86f95dce0

  • SHA256

    07b4441db81c047707784027e32d31edc9b48a4fd7c6b4b884402fabfff6d600

  • SHA512

    8b4334994a12526a06b80bde816951444ebcd6e96c3b9f95b145fce7474a4de559ef4aadfc42e49b0e0a16b229b97d5cabfa5580c5cffc9be82380131491f60f

  • SSDEEP

    3072:xphtOxsPiNIrnRNzUJ9VLCqwzBu1DjHLMVDqqkSpR:xph84iu7oJ9lwtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.076a66cf12e1f4a0b13897cad5d9bdc0.exe

    • Size

      109KB

    • MD5

      076a66cf12e1f4a0b13897cad5d9bdc0

    • SHA1

      9651ed0713c5f34cc51027e14d1cc5f86f95dce0

    • SHA256

      07b4441db81c047707784027e32d31edc9b48a4fd7c6b4b884402fabfff6d600

    • SHA512

      8b4334994a12526a06b80bde816951444ebcd6e96c3b9f95b145fce7474a4de559ef4aadfc42e49b0e0a16b229b97d5cabfa5580c5cffc9be82380131491f60f

    • SSDEEP

      3072:xphtOxsPiNIrnRNzUJ9VLCqwzBu1DjHLMVDqqkSpR:xph84iu7oJ9lwtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks