Overview

overview

10

Static

static

10

NEAS.ac725...30.exe

windows7-x64

10

NEAS.ac725...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ac725668ef44b60958b9ace628dd1e30.exe

  • Size

    113KB

  • Sample

    231111-ezfktabd34

  • MD5

    ac725668ef44b60958b9ace628dd1e30

  • SHA1

    ac7693cbc621d3aa38f52bdc1d0b01b00c878087

  • SHA256

    17d65bbb05b146e56e5c85e6fe7e71ea07007181e5e96ae33aa072c6ff1a96c0

  • SHA512

    dbc3102879057ccaf6cb5e814e52a1b303d9ec49604c5c610450b613ce14edcf20dc07e2374f59692a35a6c8aea0a3d87abdac83a7b8beedb2e695b0c4751d41

  • SSDEEP

    1536:n530eBsx5dtWSyjes7etsD8wMcsVwe1cgCe8uvQGYQzlVZg2lKVTP96YS2bMJVn:dU5Wzy28wMnpugCe8uvQa7gRj9/S2Kn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ac725668ef44b60958b9ace628dd1e30.exe

    • Size

      113KB

    • MD5

      ac725668ef44b60958b9ace628dd1e30

    • SHA1

      ac7693cbc621d3aa38f52bdc1d0b01b00c878087

    • SHA256

      17d65bbb05b146e56e5c85e6fe7e71ea07007181e5e96ae33aa072c6ff1a96c0

    • SHA512

      dbc3102879057ccaf6cb5e814e52a1b303d9ec49604c5c610450b613ce14edcf20dc07e2374f59692a35a6c8aea0a3d87abdac83a7b8beedb2e695b0c4751d41

    • SSDEEP

      1536:n530eBsx5dtWSyjes7etsD8wMcsVwe1cgCe8uvQGYQzlVZg2lKVTP96YS2bMJVn:dU5Wzy28wMnpugCe8uvQa7gRj9/S2Kn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks