Overview

overview

10

Static

static

10

NEAS.4de51...42.exe

windows7-x64

10

NEAS.4de51...42.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4de516c725c6ad8b4efa69177efa2642.exe

  • Size

    187KB

  • Sample

    231107-rswdxahd6y

  • MD5

    4de516c725c6ad8b4efa69177efa2642

  • SHA1

    396334d17e5411e1d832956102a7cf75e71db761

  • SHA256

    6af00548e6860b7514280275545254574aaf0a9ece94fa3d231a3700d0b19988

  • SHA512

    cc29436e9608b3999f4bee5f395228d7389feb09eb80c5622081d2986b3808eeb34ce876701b4386e29aaf4544e803ddcf4dc49b4222ab16aaa244e6f3ba3965

  • SSDEEP

    3072:Dv5Ls27BIJHluLyXuEQ00UIIIhg6XXXDzXXX13612IIIre36TAXXXhgavcXXXLIX:DBs27GluLyXxQQIIIhg6XXXDzXXX13sE

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4de516c725c6ad8b4efa69177efa2642.exe

    • Size

      187KB

    • MD5

      4de516c725c6ad8b4efa69177efa2642

    • SHA1

      396334d17e5411e1d832956102a7cf75e71db761

    • SHA256

      6af00548e6860b7514280275545254574aaf0a9ece94fa3d231a3700d0b19988

    • SHA512

      cc29436e9608b3999f4bee5f395228d7389feb09eb80c5622081d2986b3808eeb34ce876701b4386e29aaf4544e803ddcf4dc49b4222ab16aaa244e6f3ba3965

    • SSDEEP

      3072:Dv5Ls27BIJHluLyXuEQ00UIIIhg6XXXDzXXX13612IIIre36TAXXXhgavcXXXLIX:DBs27GluLyXxQQIIIhg6XXXDzXXX13sE

    Score
    10/10
    dropperpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Deletes itself

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks