Overview

overview

10

Static

static

10

NEAS.b1edd...30.exe

windows7-x64

10

NEAS.b1edd...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b1edd313d3db6dc3806720d5551f6a30.exe

  • Size

    161KB

  • Sample

    231111-w9l9sabe69

  • MD5

    b1edd313d3db6dc3806720d5551f6a30

  • SHA1

    47aed68b3e6e05836e5ce1ddaed44062838d9c56

  • SHA256

    df367843acf53efd6a5ea3dae7ef62e949696d99f4e7ecb08d536c88227ef3f1

  • SHA512

    b7605884342d8d9fe384a91c6107004f0f9e8a53bba1f751be7c9de6dc20e0df2d759623b4dde2f875c1c1ec8cb805128669490c6bc3d26484fe0b14605fcd63

  • SSDEEP

    3072:sWHe1fbKskbVwtCJXeex7rrIRZK8K8/kv:aZ3kbVwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b1edd313d3db6dc3806720d5551f6a30.exe

    • Size

      161KB

    • MD5

      b1edd313d3db6dc3806720d5551f6a30

    • SHA1

      47aed68b3e6e05836e5ce1ddaed44062838d9c56

    • SHA256

      df367843acf53efd6a5ea3dae7ef62e949696d99f4e7ecb08d536c88227ef3f1

    • SHA512

      b7605884342d8d9fe384a91c6107004f0f9e8a53bba1f751be7c9de6dc20e0df2d759623b4dde2f875c1c1ec8cb805128669490c6bc3d26484fe0b14605fcd63

    • SSDEEP

      3072:sWHe1fbKskbVwtCJXeex7rrIRZK8K8/kv:aZ3kbVwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks