Overview

overview

10

Static

static

10

NEAS.13465...60.exe

windows7-x64

10

NEAS.13465...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.134658d29109c4454511425ea50cc660.exe

  • Size

    378KB

  • Sample

    231105-zedwpscc41

  • MD5

    134658d29109c4454511425ea50cc660

  • SHA1

    ba2a5c9a133f0649344eb689a558b021c4d13fe4

  • SHA256

    419180e5e4a929a3dc2bd058b04d712c9aad6afb880b56afc3aae82ee6cf7122

  • SHA512

    d8e8c8be85e7873d1b5c36df61bbbede154ac3a521a977c84bfce95de72015cb2158e9e609c2f74bcc0e145c659c341c5b3758ffb1c2bd9ba9afcbd64522afaf

  • SSDEEP

    6144:Z/+H//PbEyeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:o//P4yeYr75lTefkY660fIaDZkY660fR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.134658d29109c4454511425ea50cc660.exe

    • Size

      378KB

    • MD5

      134658d29109c4454511425ea50cc660

    • SHA1

      ba2a5c9a133f0649344eb689a558b021c4d13fe4

    • SHA256

      419180e5e4a929a3dc2bd058b04d712c9aad6afb880b56afc3aae82ee6cf7122

    • SHA512

      d8e8c8be85e7873d1b5c36df61bbbede154ac3a521a977c84bfce95de72015cb2158e9e609c2f74bcc0e145c659c341c5b3758ffb1c2bd9ba9afcbd64522afaf

    • SSDEEP

      6144:Z/+H//PbEyeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:o//P4yeYr75lTefkY660fIaDZkY660fR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks