Overview

overview

10

Static

static

10

NEAS.a40c5...40.exe

windows7-x64

10

NEAS.a40c5...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a40c5fb67720c5379c90f98c3c7ceb40.exe

  • Size

    240KB

  • Sample

    231111-s43ssshe3v

  • MD5

    a40c5fb67720c5379c90f98c3c7ceb40

  • SHA1

    64a9637e9f5774bbb3c8aaf28831bd55b94d41e7

  • SHA256

    97157c1693e6d1ba4432cbf75bf43688f5ffe253c942b1fd879083786dcfcf1f

  • SHA512

    7ce9d32b672ab400cad93df40e9da07517dd08c33a5a2f6ad82616a9a9bb1dbb6c32f65a4099ffcb08eac203581b77c77e1d07abecc453d01b4d13c85e7a423b

  • SSDEEP

    3072:ttk+RxYdSSCygLJZAPgxed6BYudlNPMAvAURfE+Hxgu+tAcrbFAJc+RsUi1aVDky:s+RxLSAJZIyedZwlNPjLs+H8rtMs4

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a40c5fb67720c5379c90f98c3c7ceb40.exe

    • Size

      240KB

    • MD5

      a40c5fb67720c5379c90f98c3c7ceb40

    • SHA1

      64a9637e9f5774bbb3c8aaf28831bd55b94d41e7

    • SHA256

      97157c1693e6d1ba4432cbf75bf43688f5ffe253c942b1fd879083786dcfcf1f

    • SHA512

      7ce9d32b672ab400cad93df40e9da07517dd08c33a5a2f6ad82616a9a9bb1dbb6c32f65a4099ffcb08eac203581b77c77e1d07abecc453d01b4d13c85e7a423b

    • SSDEEP

      3072:ttk+RxYdSSCygLJZAPgxed6BYudlNPMAvAURfE+Hxgu+tAcrbFAJc+RsUi1aVDky:s+RxLSAJZIyedZwlNPjLs+H8rtMs4

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks