Overview

overview

10

Static

static

10

NEAS.a5e26...10.exe

windows7-x64

10

NEAS.a5e26...10.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a5e26a9c5a1e7b4772a65a69cde83510.exe

  • Size

    302KB

  • Sample

    231111-w8l8dsah3w

  • MD5

    a5e26a9c5a1e7b4772a65a69cde83510

  • SHA1

    9528a169d84a74b97099d7faaef088cad678d5bf

  • SHA256

    cbdcf8781793a8e75392a6f59c03557a408c9ff15b489ea03c5e068a4cd2a03e

  • SHA512

    2ed5cf9a00d41541dbce8747868aba7dfb75bd44423ab9fe9635d6f8d8c8cc77c7857d35714e5d48cc5d2fd56ad714bb29ba781e3c631a2188c64c26e38d1e86

  • SSDEEP

    6144:+JkdKqHXQ7gW1YCL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:+8KqHXQ7gEv8lXhuT9XvEhdfEmwlY1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a5e26a9c5a1e7b4772a65a69cde83510.exe

    • Size

      302KB

    • MD5

      a5e26a9c5a1e7b4772a65a69cde83510

    • SHA1

      9528a169d84a74b97099d7faaef088cad678d5bf

    • SHA256

      cbdcf8781793a8e75392a6f59c03557a408c9ff15b489ea03c5e068a4cd2a03e

    • SHA512

      2ed5cf9a00d41541dbce8747868aba7dfb75bd44423ab9fe9635d6f8d8c8cc77c7857d35714e5d48cc5d2fd56ad714bb29ba781e3c631a2188c64c26e38d1e86

    • SSDEEP

      6144:+JkdKqHXQ7gW1YCL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:+8KqHXQ7gEv8lXhuT9XvEhdfEmwlY1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks