Overview

overview

10

Static

static

10

NEAS.ba70b...10.exe

windows7-x64

10

NEAS.ba70b...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ba70b9275d5e1a6e1663b36d6c98c310.exe

  • Size

    378KB

  • Sample

    231107-g61knscg2w

  • MD5

    ba70b9275d5e1a6e1663b36d6c98c310

  • SHA1

    d141abab95ebc2b5549578072d9f34e80c05a686

  • SHA256

    8878222199c2fef835f9277811d457d140b4ad6828f59908dedc7f6c15b44f04

  • SHA512

    736e31d9b8e8e7d69ce1d1f8502c8bd926110d52c9ec174cc55a2c790b3b888965f894068853c785c9e46414672a90f2671c21d644100dec3f6206edb4f5eb51

  • SSDEEP

    6144:cE2MbpdFr5oprtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0L:cxMbpdFryRMsEat9pG4l+0K7WHT91M50

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ba70b9275d5e1a6e1663b36d6c98c310.exe

    • Size

      378KB

    • MD5

      ba70b9275d5e1a6e1663b36d6c98c310

    • SHA1

      d141abab95ebc2b5549578072d9f34e80c05a686

    • SHA256

      8878222199c2fef835f9277811d457d140b4ad6828f59908dedc7f6c15b44f04

    • SHA512

      736e31d9b8e8e7d69ce1d1f8502c8bd926110d52c9ec174cc55a2c790b3b888965f894068853c785c9e46414672a90f2671c21d644100dec3f6206edb4f5eb51

    • SSDEEP

      6144:cE2MbpdFr5oprtMsQBma/atn9pG4l+0K76zHTgb8ecFeK8TJ4u392vVAMR4/5V0L:cxMbpdFryRMsEat9pG4l+0K7WHT91M50

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks