Overview

overview

10

Static

static

10

NEAS.8d419...40.exe

windows7-x64

10

NEAS.8d419...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.8d4190bd2b1f73c0189f855ca82b7040.exe

  • Size

    123KB

  • Sample

    231106-25el2ahg29

  • MD5

    8d4190bd2b1f73c0189f855ca82b7040

  • SHA1

    cb00ee56e78e64faf9137c5fa3f58b9b3a428e3e

  • SHA256

    b25554142ded7bc150f6ceda21cccbf52ad8e53317556e5b7fcafd143b25e6c1

  • SHA512

    abbd1158c5c5e864e8e744307e8f3b7dce1dd9915922e32bc38be02f34697709817a95bf9b35b0e9f928838cf59279bbcaa208523f029a073ae845dba99f2678

  • SSDEEP

    3072:DojFlPJB7liqsHmPkgMDa1nl9GoXGhRYSa9rR85DEn5k7r8:95mzQwzGjh4rQD85k/8

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.8d4190bd2b1f73c0189f855ca82b7040.exe

    • Size

      123KB

    • MD5

      8d4190bd2b1f73c0189f855ca82b7040

    • SHA1

      cb00ee56e78e64faf9137c5fa3f58b9b3a428e3e

    • SHA256

      b25554142ded7bc150f6ceda21cccbf52ad8e53317556e5b7fcafd143b25e6c1

    • SHA512

      abbd1158c5c5e864e8e744307e8f3b7dce1dd9915922e32bc38be02f34697709817a95bf9b35b0e9f928838cf59279bbcaa208523f029a073ae845dba99f2678

    • SSDEEP

      3072:DojFlPJB7liqsHmPkgMDa1nl9GoXGhRYSa9rR85DEn5k7r8:95mzQwzGjh4rQD85k/8

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks