Overview

overview

10

Static

static

10

NEAS.a5e8d...a0.exe

windows7-x64

10

NEAS.a5e8d...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a5e8dd4d03ae00f9e354160ea300cba0.exe

  • Size

    109KB

  • Sample

    231111-n3qpmafe93

  • MD5

    a5e8dd4d03ae00f9e354160ea300cba0

  • SHA1

    f515ddc8a103addce250ce878933494d7669f1fa

  • SHA256

    45f63483f9d9474886c32b164c5e8fe83e9465731751c3e702580965696ba4bc

  • SHA512

    faac6ccb960ad594db1285f759aeff3a517c6050171b95089c453544bc8d11ca177ba9a2ea557a14b51ee3c62df45f6aa3bb8012dc20b9985d7ddef665d2a5a4

  • SSDEEP

    3072:CxSRARcSVsilm4dc5Mldjd8fo3PXl9Z7S/yCsKh2EzZA/z:CqARcSKqTc5qldgo35e/yCthvUz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a5e8dd4d03ae00f9e354160ea300cba0.exe

    • Size

      109KB

    • MD5

      a5e8dd4d03ae00f9e354160ea300cba0

    • SHA1

      f515ddc8a103addce250ce878933494d7669f1fa

    • SHA256

      45f63483f9d9474886c32b164c5e8fe83e9465731751c3e702580965696ba4bc

    • SHA512

      faac6ccb960ad594db1285f759aeff3a517c6050171b95089c453544bc8d11ca177ba9a2ea557a14b51ee3c62df45f6aa3bb8012dc20b9985d7ddef665d2a5a4

    • SSDEEP

      3072:CxSRARcSVsilm4dc5Mldjd8fo3PXl9Z7S/yCsKh2EzZA/z:CqARcSKqTc5qldgo35e/yCthvUz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks