Overview

overview

10

Static

static

10

NEAS.b4990...b0.exe

windows7-x64

10

NEAS.b4990...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b49907c4db86e8aa8c5f40d51b17b7b0.exe

  • Size

    89KB

  • Sample

    231105-x9ys9ach75

  • MD5

    b49907c4db86e8aa8c5f40d51b17b7b0

  • SHA1

    bf474779fe17c14dd81c5fbb4554eb3c23659f94

  • SHA256

    aa7f2d460b31c604c28136f883eaf8eb20997df143c8db859a427c1e41399381

  • SHA512

    f22c5be1dd430a9537a0220fab0f143ea376ce983dc1ba33a90f94ebfee3cb7b1ca53867571481612ad8b910dfdbb9945a7bda98562aefc079ab8f0fa18ee04e

  • SSDEEP

    1536:tChgkotzSMbjeo8irw4vTd82viZ9yvYXr8g/icYilExkg8Fk:tkotmiH8yiPEAwg6c5lakgwk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b49907c4db86e8aa8c5f40d51b17b7b0.exe

    • Size

      89KB

    • MD5

      b49907c4db86e8aa8c5f40d51b17b7b0

    • SHA1

      bf474779fe17c14dd81c5fbb4554eb3c23659f94

    • SHA256

      aa7f2d460b31c604c28136f883eaf8eb20997df143c8db859a427c1e41399381

    • SHA512

      f22c5be1dd430a9537a0220fab0f143ea376ce983dc1ba33a90f94ebfee3cb7b1ca53867571481612ad8b910dfdbb9945a7bda98562aefc079ab8f0fa18ee04e

    • SSDEEP

      1536:tChgkotzSMbjeo8irw4vTd82viZ9yvYXr8g/icYilExkg8Fk:tkotmiH8yiPEAwg6c5lakgwk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks