Overview

overview

10

Static

static

10

NEAS.37d0a...a0.exe

windows7-x64

10

NEAS.37d0a...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.37d0a7b172bb87dcb68ac37030d760a0.exe

  • Size

    347KB

  • Sample

    231107-c2tt4sbg27

  • MD5

    37d0a7b172bb87dcb68ac37030d760a0

  • SHA1

    e181871cd156033106dfe3e1483d18daa9601eb8

  • SHA256

    53efa7eb7d9a08221cf7484b3739b79b244591fc418e0be84cbd0f624aa5ffc7

  • SHA512

    3d05245352d2249b1591ba4596fcdae58f68fb43833f9117d5c48dec00c437ddcff53a025f6258ac411d13f0af98cacd3d9e093700ebda24ba604eeb41cf1b84

  • SSDEEP

    6144:LvE//UNgQf5+x4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:M/17x4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.37d0a7b172bb87dcb68ac37030d760a0.exe

    • Size

      347KB

    • MD5

      37d0a7b172bb87dcb68ac37030d760a0

    • SHA1

      e181871cd156033106dfe3e1483d18daa9601eb8

    • SHA256

      53efa7eb7d9a08221cf7484b3739b79b244591fc418e0be84cbd0f624aa5ffc7

    • SHA512

      3d05245352d2249b1591ba4596fcdae58f68fb43833f9117d5c48dec00c437ddcff53a025f6258ac411d13f0af98cacd3d9e093700ebda24ba604eeb41cf1b84

    • SSDEEP

      6144:LvE//UNgQf5+x4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:M/17x4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks