Overview

overview

10

Static

static

10

NEAS.a9d47...80.exe

windows7-x64

10

NEAS.a9d47...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a9d47034ee759d8e688475b26ae30b80.exe

  • Size

    104KB

  • Sample

    231111-wjkm9sae4v

  • MD5

    a9d47034ee759d8e688475b26ae30b80

  • SHA1

    42b6759b6d6e055618b1bd53723cc92d17d06e07

  • SHA256

    a84ae0921d2845826c720e3522262382419cb25d032dfa3e3920416037a1d611

  • SHA512

    9591b62c8ea40cf94ec85cbddbd252b17d59ce6a0c00a798ad023eada004660060901f32475446f50446bf757eb4bd6c83e9c5daa7b0f1e0cf6f8559ad44b521

  • SSDEEP

    3072:MpCcxVhlEAAxZe5tx7cEGrhkngpDvchkqbAIQS:M5VhQs5tx4brq2Ahn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a9d47034ee759d8e688475b26ae30b80.exe

    • Size

      104KB

    • MD5

      a9d47034ee759d8e688475b26ae30b80

    • SHA1

      42b6759b6d6e055618b1bd53723cc92d17d06e07

    • SHA256

      a84ae0921d2845826c720e3522262382419cb25d032dfa3e3920416037a1d611

    • SHA512

      9591b62c8ea40cf94ec85cbddbd252b17d59ce6a0c00a798ad023eada004660060901f32475446f50446bf757eb4bd6c83e9c5daa7b0f1e0cf6f8559ad44b521

    • SSDEEP

      3072:MpCcxVhlEAAxZe5tx7cEGrhkngpDvchkqbAIQS:M5VhQs5tx4brq2Ahn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks