Overview

overview

10

Static

static

10

NEAS.12e64...f0.exe

windows7-x64

10

NEAS.12e64...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.12e64c6802a6721d68558d2d733097f0.exe

  • Size

    347KB

  • Sample

    231111-phra4afh68

  • MD5

    12e64c6802a6721d68558d2d733097f0

  • SHA1

    6545acbaeb7d0fb0b0c8edb5ab335dfdf3b723fc

  • SHA256

    d639ef04279f965653de6b2a93ec2c9dbab74fefe4c703b561adf560f181363f

  • SHA512

    593eb3247b1c3bd46b4376b6bdb8e982ebcec1c0ab99d4b30915160ac0b8dac47da2689e9541a9c31dec9b4dde1fa8fce356a914aa5f519c3bb5886cdba7746c

  • SSDEEP

    6144:HtMmr9tqTpuE05E5Rx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:HKmrGduE0Cx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.12e64c6802a6721d68558d2d733097f0.exe

    • Size

      347KB

    • MD5

      12e64c6802a6721d68558d2d733097f0

    • SHA1

      6545acbaeb7d0fb0b0c8edb5ab335dfdf3b723fc

    • SHA256

      d639ef04279f965653de6b2a93ec2c9dbab74fefe4c703b561adf560f181363f

    • SHA512

      593eb3247b1c3bd46b4376b6bdb8e982ebcec1c0ab99d4b30915160ac0b8dac47da2689e9541a9c31dec9b4dde1fa8fce356a914aa5f519c3bb5886cdba7746c

    • SSDEEP

      6144:HtMmr9tqTpuE05E5Rx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:HKmrGduE0Cx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks