Overview

overview

10

Static

static

10

NEAS.6f928...30.exe

windows7-x64

10

NEAS.6f928...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.6f9281bf96a262d7fcad188513697b30.exe

  • Size

    487KB

  • Sample

    231107-yyvg5aha48

  • MD5

    6f9281bf96a262d7fcad188513697b30

  • SHA1

    d13973ceb9a44be337eeece00081debb158712da

  • SHA256

    7cd6baeccf6f24c4d41f49b5f851a36c338644f758e0f1522ab226ca9698dd1b

  • SHA512

    e21a6b77febe02eb0cc79737db67ace71a6831dd8472b945c3ebf52b26393877b0a176970138b540d0eed64a1a463ae45444ec5d374b887683ad0c9d1a520380

  • SSDEEP

    12288:bxpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:bxWHWZ0PVdvcY9+8hk5DtJNBcL/C10dM

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.6f9281bf96a262d7fcad188513697b30.exe

    • Size

      487KB

    • MD5

      6f9281bf96a262d7fcad188513697b30

    • SHA1

      d13973ceb9a44be337eeece00081debb158712da

    • SHA256

      7cd6baeccf6f24c4d41f49b5f851a36c338644f758e0f1522ab226ca9698dd1b

    • SHA512

      e21a6b77febe02eb0cc79737db67ace71a6831dd8472b945c3ebf52b26393877b0a176970138b540d0eed64a1a463ae45444ec5d374b887683ad0c9d1a520380

    • SSDEEP

      12288:bxpV6yYPI3cpV6yYPZ0PVdvcY9+8hk5PDtJNBcL/v610yiqo4Z:bxWHWZ0PVdvcY9+8hk5DtJNBcL/C10dM

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks