Overview

overview

10

Static

static

10

NEAS.4feff...40.exe

windows7-x64

10

NEAS.4feff...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4feffb8e211b25bb1b3c94f8a7e32740.exe

  • Size

    432KB

  • Sample

    231107-aa1ggaab82

  • MD5

    4feffb8e211b25bb1b3c94f8a7e32740

  • SHA1

    21430e94003d5097cc351895d822c93b05344ec2

  • SHA256

    dda93ffe9488ee1e925deeea50b50c0712e2130b2e573dd28c797c7ff8037462

  • SHA512

    42afff850a17ac441bc4e5515c96bf63e68e162d8930a6b0490148fd06dd20665cd40f40e1ab2152769bffbcccd74d66aac6070feb022a73a2fb15a58714e40d

  • SSDEEP

    12288:N+P7yO5t6NSN6G5tsLc5t6NSN6G5tgA1F:N+P7yhc6TTc6tA1F

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4feffb8e211b25bb1b3c94f8a7e32740.exe

    • Size

      432KB

    • MD5

      4feffb8e211b25bb1b3c94f8a7e32740

    • SHA1

      21430e94003d5097cc351895d822c93b05344ec2

    • SHA256

      dda93ffe9488ee1e925deeea50b50c0712e2130b2e573dd28c797c7ff8037462

    • SHA512

      42afff850a17ac441bc4e5515c96bf63e68e162d8930a6b0490148fd06dd20665cd40f40e1ab2152769bffbcccd74d66aac6070feb022a73a2fb15a58714e40d

    • SSDEEP

      12288:N+P7yO5t6NSN6G5tsLc5t6NSN6G5tgA1F:N+P7yhc6TTc6tA1F

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks