Overview

overview

10

Static

static

10

NEAS.a052b...f0.exe

windows7-x64

10

NEAS.a052b...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a052b29ae1ca4a4ef67a0d4f0e8592f0.exe

  • Size

    78KB

  • Sample

    231107-xrg3safd88

  • MD5

    a052b29ae1ca4a4ef67a0d4f0e8592f0

  • SHA1

    c3d504b974622fb5951549e9edb94b7a55d8fbf5

  • SHA256

    d3f9b7e609b05ca6a091af679007bc71b486a69055bb3341066956948eca46f6

  • SHA512

    7409ca11aeb6ba504bd6538fcb02351aa5ec823d432531799ef7fccfb5fd243d4a5e331a1d29b152978e80b2d31037f9ac11dd6191c9b3b1a36e19160d82553f

  • SSDEEP

    1536:rtMxtgEsrsVqe+8RMb6YGUNCOHbUw03bqLKU5iH26yf5oAnqDM+4yyF:h9JrsVqe+lb6aNbUELtiWCuq4cyF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a052b29ae1ca4a4ef67a0d4f0e8592f0.exe

    • Size

      78KB

    • MD5

      a052b29ae1ca4a4ef67a0d4f0e8592f0

    • SHA1

      c3d504b974622fb5951549e9edb94b7a55d8fbf5

    • SHA256

      d3f9b7e609b05ca6a091af679007bc71b486a69055bb3341066956948eca46f6

    • SHA512

      7409ca11aeb6ba504bd6538fcb02351aa5ec823d432531799ef7fccfb5fd243d4a5e331a1d29b152978e80b2d31037f9ac11dd6191c9b3b1a36e19160d82553f

    • SSDEEP

      1536:rtMxtgEsrsVqe+8RMb6YGUNCOHbUw03bqLKU5iH26yf5oAnqDM+4yyF:h9JrsVqe+lb6aNbUELtiWCuq4cyF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks