Overview

overview

10

Static

static

10

NEAS.f3469...70.exe

windows7-x64

10

NEAS.f3469...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f3469ce601ed104e8a5ed4a521df8270.exe

  • Size

    89KB

  • Sample

    231107-zqnkaahh52

  • MD5

    f3469ce601ed104e8a5ed4a521df8270

  • SHA1

    0cfe90e4c70d7fb02a25685cb9ef31efefc38ac0

  • SHA256

    2ef9cbad976990874c59a272a024dde9b65eeb34b90bcee11ab7179c827eeedb

  • SHA512

    16264679be61ef013e4ef1705d561b7bf92574354abf33312de12863a685feff85d8ea511034b474c4de8f1beb0c7fb6bc84d164488172307289a363c820ecaf

  • SSDEEP

    1536:JEag5T9JQFn0KYqY6+UtWpmpfHAk6JyXRQ+D68a+VMKKTRVGFtUhQfR1WRaROR8R:JEag5T9JQzkstq+/Ak6ee3r4MKy3G7Ug

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f3469ce601ed104e8a5ed4a521df8270.exe

    • Size

      89KB

    • MD5

      f3469ce601ed104e8a5ed4a521df8270

    • SHA1

      0cfe90e4c70d7fb02a25685cb9ef31efefc38ac0

    • SHA256

      2ef9cbad976990874c59a272a024dde9b65eeb34b90bcee11ab7179c827eeedb

    • SHA512

      16264679be61ef013e4ef1705d561b7bf92574354abf33312de12863a685feff85d8ea511034b474c4de8f1beb0c7fb6bc84d164488172307289a363c820ecaf

    • SSDEEP

      1536:JEag5T9JQFn0KYqY6+UtWpmpfHAk6JyXRQ+D68a+VMKKTRVGFtUhQfR1WRaROR8R:JEag5T9JQzkstq+/Ak6ee3r4MKy3G7Ug

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks