Overview

overview

10

Static

static

10

NEAS.14112...80.exe

windows7-x64

10

NEAS.14112...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1411241745143a15f745a8d898caf680.exe

  • Size

    345KB

  • Sample

    231106-c7zbsahg53

  • MD5

    1411241745143a15f745a8d898caf680

  • SHA1

    f371dfa17bf625b5cfc8d5cdc3054397a055b42b

  • SHA256

    aaaf8ad01235cd48afe54c040a565167b00c7406f22c42a1ddef53c2519331df

  • SHA512

    92d2d270a37fe3b03eb419023ec6dff8decfa332682a75b9090470ffbebf622c8cc3fb5f405b887049fcf56c2e6fbd48f9e8b97535ddcc1c6255bd217492c53b

  • SSDEEP

    6144:bk4GCMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:bkU1uznghoaHACwBkka8eGp7dPRr6aea

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.1411241745143a15f745a8d898caf680.exe

    • Size

      345KB

    • MD5

      1411241745143a15f745a8d898caf680

    • SHA1

      f371dfa17bf625b5cfc8d5cdc3054397a055b42b

    • SHA256

      aaaf8ad01235cd48afe54c040a565167b00c7406f22c42a1ddef53c2519331df

    • SHA512

      92d2d270a37fe3b03eb419023ec6dff8decfa332682a75b9090470ffbebf622c8cc3fb5f405b887049fcf56c2e6fbd48f9e8b97535ddcc1c6255bd217492c53b

    • SSDEEP

      6144:bk4GCMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6aeK9kc:bkU1uznghoaHACwBkka8eGp7dPRr6aea

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks