Overview

overview

10

Static

static

10

NEAS.e0b7e...a0.exe

windows7-x64

10

NEAS.e0b7e...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e0b7e832fafaf9e02910c9d8ecda6da0.exe

  • Size

    169KB

  • Sample

    231111-f5bz9ace93

  • MD5

    e0b7e832fafaf9e02910c9d8ecda6da0

  • SHA1

    0e6e6b7076af55b545017929b1783dcde9ba147f

  • SHA256

    362755deff35122f9087eeb3072b63c934d6fb133d14bc1038e917748291e0b4

  • SHA512

    1de3826211028c45945e6c55ec9cd07c77c114c4092bdaa83606a7d40aec2fa39110f065b298c3b26f8fe04c2b215b240a3b8a1f3ca84b17ab824cd22ebb9f06

  • SSDEEP

    3072:XiHuBSOOooIQm3K1lU2l7vCFyCYUsIBU4QXqMhT9z/EHh63OIBi:SHugooIT3K1lvl7HCYfF4QXxhT9z/jOJ

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e0b7e832fafaf9e02910c9d8ecda6da0.exe

    • Size

      169KB

    • MD5

      e0b7e832fafaf9e02910c9d8ecda6da0

    • SHA1

      0e6e6b7076af55b545017929b1783dcde9ba147f

    • SHA256

      362755deff35122f9087eeb3072b63c934d6fb133d14bc1038e917748291e0b4

    • SHA512

      1de3826211028c45945e6c55ec9cd07c77c114c4092bdaa83606a7d40aec2fa39110f065b298c3b26f8fe04c2b215b240a3b8a1f3ca84b17ab824cd22ebb9f06

    • SSDEEP

      3072:XiHuBSOOooIQm3K1lU2l7vCFyCYUsIBU4QXqMhT9z/EHh63OIBi:SHugooIT3K1lvl7HCYfF4QXxhT9z/jOJ

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks