Overview

overview

10

Static

static

10

NEAS.1f198...b0.exe

windows7-x64

10

NEAS.1f198...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.1f19866c1a1cf7fa5349bf65b45d05b0.exe

  • Size

    69KB

  • Sample

    231106-12a9rshc72

  • MD5

    1f19866c1a1cf7fa5349bf65b45d05b0

  • SHA1

    bf1e0f8a4ef7bbf6741413c6d1a50bacaa591eee

  • SHA256

    8346dedb58f9dcc44869d7bf50e52d02c040ea9ccd9b39fe0049dca7aa071e44

  • SHA512

    f68aec1518106acc238bc0b45a9b0e320de8a872c4e6278d1255e183c8eca47546624b7a6464fc257df1e8158e37721195b7de4c8e6ea60397a486390e16548a

  • SSDEEP

    1536:UjWtEs8FzHXFkmXtM2r0aOtsPNein/GFZCeDAyY:UjWas8ZXrj05tsPNFn/GFZC1yY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.1f19866c1a1cf7fa5349bf65b45d05b0.exe

    • Size

      69KB

    • MD5

      1f19866c1a1cf7fa5349bf65b45d05b0

    • SHA1

      bf1e0f8a4ef7bbf6741413c6d1a50bacaa591eee

    • SHA256

      8346dedb58f9dcc44869d7bf50e52d02c040ea9ccd9b39fe0049dca7aa071e44

    • SHA512

      f68aec1518106acc238bc0b45a9b0e320de8a872c4e6278d1255e183c8eca47546624b7a6464fc257df1e8158e37721195b7de4c8e6ea60397a486390e16548a

    • SSDEEP

      1536:UjWtEs8FzHXFkmXtM2r0aOtsPNein/GFZCeDAyY:UjWas8ZXrj05tsPNFn/GFZC1yY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks