Overview

overview

10

Static

static

10

NEAS.b1967...cf.exe

windows7-x64

10

NEAS.b1967...cf.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b196794d2651ad09ba8ccb6ad6d024cf.exe

  • Size

    416KB

  • Sample

    231107-samvgscd85

  • MD5

    b196794d2651ad09ba8ccb6ad6d024cf

  • SHA1

    856e561b86a6fdfbd3ddcc7713175465c19f0dea

  • SHA256

    e27bbc244dd8ee895b46767eab2f67a3c930963a4062dff393773b78555946f2

  • SHA512

    eb731b5a3fdb9fb07875335d6766453b1b9c58bccd5669d987a7f213b94a87598d732ef904763c44f6d62cc18694c3c47003585c9832749b60300d894c97878c

  • SSDEEP

    12288:qFH83KyYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:qSBYJ07kE0KoFtw2gu9RxrBIUbPLwH9n

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b196794d2651ad09ba8ccb6ad6d024cf.exe

    • Size

      416KB

    • MD5

      b196794d2651ad09ba8ccb6ad6d024cf

    • SHA1

      856e561b86a6fdfbd3ddcc7713175465c19f0dea

    • SHA256

      e27bbc244dd8ee895b46767eab2f67a3c930963a4062dff393773b78555946f2

    • SHA512

      eb731b5a3fdb9fb07875335d6766453b1b9c58bccd5669d987a7f213b94a87598d732ef904763c44f6d62cc18694c3c47003585c9832749b60300d894c97878c

    • SSDEEP

      12288:qFH83KyYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:qSBYJ07kE0KoFtw2gu9RxrBIUbPLwH9n

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks