Overview

overview

10

Static

static

10

NEAS.d015a...60.exe

windows7-x64

10

NEAS.d015a...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d015a0b91a35cc3ccea9eb1f45b61760.exe

  • Size

    565KB

  • Sample

    231111-flqdjaca97

  • MD5

    d015a0b91a35cc3ccea9eb1f45b61760

  • SHA1

    4b5d5e3dd1db5f7f5db95f5e682aff4df7ca59fe

  • SHA256

    28fa33718932b5ebcd85db18739de75ffa7220e5f21e69f85beb5fd751dfda09

  • SHA512

    537c77a29c888f9726f2774f0d3988011d407c1f1e93f9158fbd2e2c5856f06876f843f0d4dcd36c75cf3c44cf388165ab618e255065a169515292a46ded5b1e

  • SSDEEP

    12288:/vDUJxM4tuFjAhC/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF8OX:/vDUJxVtuFjAhCm0BmmvFimm09OX

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d015a0b91a35cc3ccea9eb1f45b61760.exe

    • Size

      565KB

    • MD5

      d015a0b91a35cc3ccea9eb1f45b61760

    • SHA1

      4b5d5e3dd1db5f7f5db95f5e682aff4df7ca59fe

    • SHA256

      28fa33718932b5ebcd85db18739de75ffa7220e5f21e69f85beb5fd751dfda09

    • SHA512

      537c77a29c888f9726f2774f0d3988011d407c1f1e93f9158fbd2e2c5856f06876f843f0d4dcd36c75cf3c44cf388165ab618e255065a169515292a46ded5b1e

    • SSDEEP

      12288:/vDUJxM4tuFjAhC/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KF8OX:/vDUJxVtuFjAhCm0BmmvFimm09OX

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks