Overview

overview

10

Static

static

10

NEAS.75363...70.exe

windows7-x64

10

NEAS.75363...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.7536377d301e0c9c9a90ded8e3b82570.exe

  • Size

    833KB

  • Sample

    231106-z33vqsgg64

  • MD5

    7536377d301e0c9c9a90ded8e3b82570

  • SHA1

    8dc127ee54d9c27909c6b2afef2aa6e89e22961a

  • SHA256

    53325eea093bcb25a5970248d74f15339a0dbc7831320d8d408d2488edd1d3d3

  • SHA512

    35d705a298e2fcd7272210ef1c241e9d16b3e62c6597406388a67406b732464397babd2a6e4de3bf55979273e0206099d0ae3a98aef0c633e731decac08f084f

  • SSDEEP

    24576:500dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:fdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.7536377d301e0c9c9a90ded8e3b82570.exe

    • Size

      833KB

    • MD5

      7536377d301e0c9c9a90ded8e3b82570

    • SHA1

      8dc127ee54d9c27909c6b2afef2aa6e89e22961a

    • SHA256

      53325eea093bcb25a5970248d74f15339a0dbc7831320d8d408d2488edd1d3d3

    • SHA512

      35d705a298e2fcd7272210ef1c241e9d16b3e62c6597406388a67406b732464397babd2a6e4de3bf55979273e0206099d0ae3a98aef0c633e731decac08f084f

    • SSDEEP

      24576:500dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIv:fdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks