Overview

overview

10

Static

static

10

NEAS.23a85...f0.exe

windows7-x64

10

NEAS.23a85...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.23a85bc01b6ee897ff3f6bce47b410f0.exe

  • Size

    192KB

  • Sample

    231107-xzst9aeb5x

  • MD5

    23a85bc01b6ee897ff3f6bce47b410f0

  • SHA1

    c53863dd895def2ba1b7b27e72ccfd80142d9dfc

  • SHA256

    490422a4387dc8bdfb8341d797c290e4ac37b5ba1321194fd3504944dab66b80

  • SHA512

    7069226da78f3a2408bd37e1197e769385cb802e85fd8bf364ef57c877caec2cdcca2c0df82aab30b74a16f6204e7491a32bf56a4645ff5211d57ace04340ec0

  • SSDEEP

    3072:qHl8qomVl/xJwUrEDL1Y2PLK7XOqHnnXWRg3kH3v7Ge8Dd1AZoUBW3FJeRuaWNX/:e9VjHiu7+qHnms236e+dWZHEFJ7aWN1B

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.23a85bc01b6ee897ff3f6bce47b410f0.exe

    • Size

      192KB

    • MD5

      23a85bc01b6ee897ff3f6bce47b410f0

    • SHA1

      c53863dd895def2ba1b7b27e72ccfd80142d9dfc

    • SHA256

      490422a4387dc8bdfb8341d797c290e4ac37b5ba1321194fd3504944dab66b80

    • SHA512

      7069226da78f3a2408bd37e1197e769385cb802e85fd8bf364ef57c877caec2cdcca2c0df82aab30b74a16f6204e7491a32bf56a4645ff5211d57ace04340ec0

    • SSDEEP

      3072:qHl8qomVl/xJwUrEDL1Y2PLK7XOqHnnXWRg3kH3v7Ge8Dd1AZoUBW3FJeRuaWNX/:e9VjHiu7+qHnms236e+dWZHEFJ7aWN1B

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks