Overview

overview

10

Static

static

10

NEAS.8959b...50.exe

windows7-x64

10

NEAS.8959b...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.8959b2048d05b92653d9d7c8a6197b50.exe

  • Size

    122KB

  • Sample

    231112-1d9gnacf95

  • MD5

    8959b2048d05b92653d9d7c8a6197b50

  • SHA1

    51adb346c2a087a1348962dc180073da3dd25b57

  • SHA256

    b88775346c7afe6da2e195293f634dd807b7ea2ffe0815c7341171610562c866

  • SHA512

    21c6147bdf0792b2b0be09edb1f7c64efdbaed382d827843e6edae50c2189c3efdad259ad6eaa05b6309c65095707c2a2a68dec48b7fe9188fa813858316a115

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4K:6u8ANCUdgfmD7zey0KUj6TjR9i4K

Score
10/10
berbewdropperevasionpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.8959b2048d05b92653d9d7c8a6197b50.exe

    • Size

      122KB

    • MD5

      8959b2048d05b92653d9d7c8a6197b50

    • SHA1

      51adb346c2a087a1348962dc180073da3dd25b57

    • SHA256

      b88775346c7afe6da2e195293f634dd807b7ea2ffe0815c7341171610562c866

    • SHA512

      21c6147bdf0792b2b0be09edb1f7c64efdbaed382d827843e6edae50c2189c3efdad259ad6eaa05b6309c65095707c2a2a68dec48b7fe9188fa813858316a115

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4K:6u8ANCUdgfmD7zey0KUj6TjR9i4K

    Score
    10/10
    dropperevasionpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks