Overview

overview

10

Static

static

10

NEAS.07635...d0.exe

windows7-x64

10

NEAS.07635...d0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0763589f8f5da6eaa1c825fbff79c7d0.exe

  • Size

    256KB

  • Sample

    231106-bp32ksfc9z

  • MD5

    0763589f8f5da6eaa1c825fbff79c7d0

  • SHA1

    f54198d071110806d896af0c7e432a4269fda1dc

  • SHA256

    350ecc5bcf0308fb515fae6dced721d84e9d934b00f80504e053e19da9822cb2

  • SHA512

    a45c30f55dafa36c4fe8e63b4f75a0fb3f7e7ae0bad99c4754fc1aec7d911dcd6ce2de51d7dd47856ee13f058938719d830adb489f52fea5fe53ef6b48dc2733

  • SSDEEP

    6144:cU4Os5EWEjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:cws5vSlpJxifbWGRdA6sQhPbWGRdA6s5

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0763589f8f5da6eaa1c825fbff79c7d0.exe

    • Size

      256KB

    • MD5

      0763589f8f5da6eaa1c825fbff79c7d0

    • SHA1

      f54198d071110806d896af0c7e432a4269fda1dc

    • SHA256

      350ecc5bcf0308fb515fae6dced721d84e9d934b00f80504e053e19da9822cb2

    • SHA512

      a45c30f55dafa36c4fe8e63b4f75a0fb3f7e7ae0bad99c4754fc1aec7d911dcd6ce2de51d7dd47856ee13f058938719d830adb489f52fea5fe53ef6b48dc2733

    • SSDEEP

      6144:cU4Os5EWEjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:cws5vSlpJxifbWGRdA6sQhPbWGRdA6s5

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks