Overview

overview

10

Static

static

10

NEAS.798b1...5f.exe

windows7-x64

10

NEAS.798b1...5f.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.798b1f167cade37711408540ff93cb5f.exe

  • Size

    67KB

  • Sample

    231107-rql3fshb9t

  • MD5

    798b1f167cade37711408540ff93cb5f

  • SHA1

    0ff20ca6e47e27698453d361dff8469e99c3ee59

  • SHA256

    1b1d3ed335bfc261e298fc4fa8fdce225ae2783b8cca693048facb87d6f6885b

  • SHA512

    385d00e0a044581dca4d5d081f2e1ffa3a6922e4c4ba6b1895ae167d2df1ec395269c0788f70cb8580b9da2b764a7f4f31ce7562e923b3ffd4412708f4d02b6f

  • SSDEEP

    1536:dtF6qP6DTPap0l1851oLsJifTduD4oTxw:noip0ly51ysJibdMTxw

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.798b1f167cade37711408540ff93cb5f.exe

    • Size

      67KB

    • MD5

      798b1f167cade37711408540ff93cb5f

    • SHA1

      0ff20ca6e47e27698453d361dff8469e99c3ee59

    • SHA256

      1b1d3ed335bfc261e298fc4fa8fdce225ae2783b8cca693048facb87d6f6885b

    • SHA512

      385d00e0a044581dca4d5d081f2e1ffa3a6922e4c4ba6b1895ae167d2df1ec395269c0788f70cb8580b9da2b764a7f4f31ce7562e923b3ffd4412708f4d02b6f

    • SSDEEP

      1536:dtF6qP6DTPap0l1851oLsJifTduD4oTxw:noip0ly51ysJibdMTxw

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks