Overview

overview

10

Static

static

10

NEAS.69db0...60.exe

windows7-x64

10

NEAS.69db0...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.69db0263ff6132d5c7a16cab82117860.exe

  • Size

    416KB

  • Sample

    231107-ehay1acf34

  • MD5

    69db0263ff6132d5c7a16cab82117860

  • SHA1

    ad899c38a580fc826a58e83d338590e23d5b6c70

  • SHA256

    a3ae144e1064e0754c2554dab671c4a58f5717b5a2c2df28486ce3eeca33a9c8

  • SHA512

    d256991b43e4832331b2b9be669e7788d715ef2f282956010e614e43f736a1023bcb999c4b28ef2e719febbc14ce088e164f3d675a605bc4309a05d7524383a9

  • SSDEEP

    12288:xJzwMYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:j7YJ07kE0KoFtw2gu9RxrBIUbPLwH96I

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.69db0263ff6132d5c7a16cab82117860.exe

    • Size

      416KB

    • MD5

      69db0263ff6132d5c7a16cab82117860

    • SHA1

      ad899c38a580fc826a58e83d338590e23d5b6c70

    • SHA256

      a3ae144e1064e0754c2554dab671c4a58f5717b5a2c2df28486ce3eeca33a9c8

    • SHA512

      d256991b43e4832331b2b9be669e7788d715ef2f282956010e614e43f736a1023bcb999c4b28ef2e719febbc14ce088e164f3d675a605bc4309a05d7524383a9

    • SSDEEP

      12288:xJzwMYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:j7YJ07kE0KoFtw2gu9RxrBIUbPLwH96I

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks