Overview

overview

10

Static

static

10

NEAS.32867...50.exe

windows7-x64

10

NEAS.32867...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.32867c5d737d8e9b805bd47379448450.exe

  • Size

    345KB

  • Sample

    231107-ycmkdsgd26

  • MD5

    32867c5d737d8e9b805bd47379448450

  • SHA1

    31d23f43ac81d913b9ffe7b56c94f5496eae3972

  • SHA256

    d62eecfeae1f06d8318673ddd87d5799050eace768c86340da6af5add9205f17

  • SHA512

    dfc2c13303555f082aeb7df929ea8432497579854ca3f0622e337c9ff677e6e3b03713fd20187c5db29cbebeca183f12178edf0d9cda373a05e45d44d6fcdb21

  • SSDEEP

    6144:jAaQR9a6JO6pMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6af:jAV3a6T1uznghoaHACwBkka8eGp7dPRH

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.32867c5d737d8e9b805bd47379448450.exe

    • Size

      345KB

    • MD5

      32867c5d737d8e9b805bd47379448450

    • SHA1

      31d23f43ac81d913b9ffe7b56c94f5496eae3972

    • SHA256

      d62eecfeae1f06d8318673ddd87d5799050eace768c86340da6af5add9205f17

    • SHA512

      dfc2c13303555f082aeb7df929ea8432497579854ca3f0622e337c9ff677e6e3b03713fd20187c5db29cbebeca183f12178edf0d9cda373a05e45d44d6fcdb21

    • SSDEEP

      6144:jAaQR9a6JO6pMaB4muz14QaYgTt+scaHACw6Ykw/a8dWBtp27DpomqcPMwNFN6af:jAV3a6T1uznghoaHACwBkka8eGp7dPRH

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks