Overview

overview

10

Static

static

10

NEAS.e9521...f0.exe

windows7-x64

10

NEAS.e9521...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e9521ee9dfbff3f4e3b8f0d40131e6f0.exe

  • Size

    272KB

  • Sample

    231107-zqst1ahh67

  • MD5

    e9521ee9dfbff3f4e3b8f0d40131e6f0

  • SHA1

    48330a8f1557b5cab55a1b62869387ffa262703b

  • SHA256

    3caf7b7b3fa004b4c51536871a3c674cd4810c50fd3c5e6cdf37a6ebf4b0b4c5

  • SHA512

    27dc5c7f8fbc293e707c4f1ec9e2dc89c9a44cf8cb0d90d6087733707dca443320e1764ac37a2c6a072fcb72849f5db134dd68fc2f23b93045863c991b7b5211

  • SSDEEP

    6144:VqpHTU+1HXYEeh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMG2fxCcv9:kHTbIdLnfBJKFbhDwBpV6yYP4qa2Ll

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e9521ee9dfbff3f4e3b8f0d40131e6f0.exe

    • Size

      272KB

    • MD5

      e9521ee9dfbff3f4e3b8f0d40131e6f0

    • SHA1

      48330a8f1557b5cab55a1b62869387ffa262703b

    • SHA256

      3caf7b7b3fa004b4c51536871a3c674cd4810c50fd3c5e6cdf37a6ebf4b0b4c5

    • SHA512

      27dc5c7f8fbc293e707c4f1ec9e2dc89c9a44cf8cb0d90d6087733707dca443320e1764ac37a2c6a072fcb72849f5db134dd68fc2f23b93045863c991b7b5211

    • SSDEEP

      6144:VqpHTU+1HXYEeh/xaSfBJKFbhD7sYQpui6yYPaIGckZqByMG2fxCcv9:kHTbIdLnfBJKFbhDwBpV6yYP4qa2Ll

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks