Overview

overview

10

Static

static

10

NEAS.dee91...10.exe

windows7-x64

10

NEAS.dee91...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.dee91cd9aac6002938a28ec1a898b310.exe

  • Size

    109KB

  • Sample

    231107-e5pqnsda53

  • MD5

    dee91cd9aac6002938a28ec1a898b310

  • SHA1

    252395ddd25c60e6044a2b3f136f0133c0288fc0

  • SHA256

    43447089a5e9f8788feddbc74808062776f1cf9c0732fe3e8ded14654d73a912

  • SHA512

    17c64ef0b8779617951251014e4464e39f751eb790d0a231d191e1c012458488c59b511df584718a8488c23c07ad90612fb2c4e613da35f94fa5783862c1093f

  • SSDEEP

    3072:zdyDVEh+pcYLEASqSgxK+vQH9J9ALCqwzBu1DjHLMVDqqkSpR:RyDa4cYPCgxfvQdJ9gwtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dee91cd9aac6002938a28ec1a898b310.exe

    • Size

      109KB

    • MD5

      dee91cd9aac6002938a28ec1a898b310

    • SHA1

      252395ddd25c60e6044a2b3f136f0133c0288fc0

    • SHA256

      43447089a5e9f8788feddbc74808062776f1cf9c0732fe3e8ded14654d73a912

    • SHA512

      17c64ef0b8779617951251014e4464e39f751eb790d0a231d191e1c012458488c59b511df584718a8488c23c07ad90612fb2c4e613da35f94fa5783862c1093f

    • SSDEEP

      3072:zdyDVEh+pcYLEASqSgxK+vQH9J9ALCqwzBu1DjHLMVDqqkSpR:RyDa4cYPCgxfvQdJ9gwtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks