Overview

overview

10

Static

static

10

NEAS.2faa9...80.exe

windows7-x64

10

NEAS.2faa9...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.2faa99faa2e5e8f4c02338a6c619a780.exe

  • Size

    128KB

  • Sample

    231105-lg49sadg4x

  • MD5

    2faa99faa2e5e8f4c02338a6c619a780

  • SHA1

    8f78888c6d7e2825ff038c233f59069fa80bdb19

  • SHA256

    5664c1258394f1e33878f0a9c066a406b8eea5609d5d92a8f3903591131e1868

  • SHA512

    be7ff504a42d279c1170876fd37ff8f81e0a98aa3fc5b1f54a70fa8daf13ea06325622f08a82322d5607a77acf8bde3b1974014d77affe0dbc341f125e26fca8

  • SSDEEP

    3072:GMPi1mDXyH+IR9j0aG1LDd1AZoUBW3FJeRuaWNXmgu+tB:2MDXyfvQa2vdWZHEFJ7aWN1B

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.2faa99faa2e5e8f4c02338a6c619a780.exe

    • Size

      128KB

    • MD5

      2faa99faa2e5e8f4c02338a6c619a780

    • SHA1

      8f78888c6d7e2825ff038c233f59069fa80bdb19

    • SHA256

      5664c1258394f1e33878f0a9c066a406b8eea5609d5d92a8f3903591131e1868

    • SHA512

      be7ff504a42d279c1170876fd37ff8f81e0a98aa3fc5b1f54a70fa8daf13ea06325622f08a82322d5607a77acf8bde3b1974014d77affe0dbc341f125e26fca8

    • SSDEEP

      3072:GMPi1mDXyH+IR9j0aG1LDd1AZoUBW3FJeRuaWNXmgu+tB:2MDXyfvQa2vdWZHEFJ7aWN1B

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks