Overview

overview

10

Static

static

10

NEAS.4f306...30.exe

windows7-x64

10

NEAS.4f306...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4f306b85ac39a4749a7464cabf2eef30.exe

  • Size

    128KB

  • Sample

    231105-zgldkacc8x

  • MD5

    4f306b85ac39a4749a7464cabf2eef30

  • SHA1

    25f2399af9288f4f578666e4ef3b21e4d5bac1cd

  • SHA256

    f886024b0c55c6c862d3a764373e8c8d26375138169f07ef5657850e65497746

  • SHA512

    49cc3a55b9e30890951ce49eccc4a02bbb2d784f866dc26ea846713ca4eb3f3dd8e2e568ddbe85f915b5023592a5ffdd38cdc43d94446fc437b6c976197518ee

  • SSDEEP

    1536:a+HmME0dzbnt+dBaxR5Qx8E3KLI7l0sLp/1sXU/IVrl/ShX2oZcWiqgF72S7f/QI:qMTzbt+HaB3ssXfwXtmW2wS7IrHrYj

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4f306b85ac39a4749a7464cabf2eef30.exe

    • Size

      128KB

    • MD5

      4f306b85ac39a4749a7464cabf2eef30

    • SHA1

      25f2399af9288f4f578666e4ef3b21e4d5bac1cd

    • SHA256

      f886024b0c55c6c862d3a764373e8c8d26375138169f07ef5657850e65497746

    • SHA512

      49cc3a55b9e30890951ce49eccc4a02bbb2d784f866dc26ea846713ca4eb3f3dd8e2e568ddbe85f915b5023592a5ffdd38cdc43d94446fc437b6c976197518ee

    • SSDEEP

      1536:a+HmME0dzbnt+dBaxR5Qx8E3KLI7l0sLp/1sXU/IVrl/ShX2oZcWiqgF72S7f/QI:qMTzbt+HaB3ssXfwXtmW2wS7IrHrYj

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks