Overview

overview

10

Static

static

10

NEAS.ea7f9...30.exe

windows7-x64

10

NEAS.ea7f9...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ea7f93e713f3ff6f7845929af6386830.exe

  • Size

    240KB

  • Sample

    231106-dff7kahh82

  • MD5

    ea7f93e713f3ff6f7845929af6386830

  • SHA1

    83a5975d1a7197c9b56b9df9617d82079f1c2f58

  • SHA256

    7be6e081e8ab326ce0d34fc1c0820a3f42f6c40a2eef817f6b7b13edc6fbba5e

  • SHA512

    1153ffdda031d4fc9d5e5ab0df09934526cff951a987c0ea96774e2aeef3187ed216a6f86d48964a3b96c0ccdabbc84637aaa41482b29e257ff7a10a1553d52e

  • SSDEEP

    6144:hQ7TcEKeCJHo7EcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:hQ7TJKeX7tycSly8DSUA1YHVD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ea7f93e713f3ff6f7845929af6386830.exe

    • Size

      240KB

    • MD5

      ea7f93e713f3ff6f7845929af6386830

    • SHA1

      83a5975d1a7197c9b56b9df9617d82079f1c2f58

    • SHA256

      7be6e081e8ab326ce0d34fc1c0820a3f42f6c40a2eef817f6b7b13edc6fbba5e

    • SHA512

      1153ffdda031d4fc9d5e5ab0df09934526cff951a987c0ea96774e2aeef3187ed216a6f86d48964a3b96c0ccdabbc84637aaa41482b29e257ff7a10a1553d52e

    • SSDEEP

      6144:hQ7TcEKeCJHo7EcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:hQ7TJKeX7tycSly8DSUA1YHVD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks