Overview

overview

10

Static

static

10

NEAS.d2734...90.exe

windows7-x64

10

NEAS.d2734...90.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d273490060b79cb128ed0c011eab3190.exe

  • Size

    1.2MB

  • Sample

    231112-1fysyacb9z

  • MD5

    d273490060b79cb128ed0c011eab3190

  • SHA1

    38bbf083361a288ccb31175e9486ffef24a19181

  • SHA256

    c7e799341a9d829b6e86e3ea062afdd29ac832b014c6fb873c0c467570e697b0

  • SHA512

    3b1b39777705aa31c38edac6536c7b6c2679506504e8b5dc7e261ea64c35b1e312b22ee1862ef6782b986bec14c0df154cbabb988bf41d80a05e99b0b859b9a3

  • SSDEEP

    24576:+UYlFiWVPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWiQ4ca:jYlFiWNbazR0vKLXZ4pca

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d273490060b79cb128ed0c011eab3190.exe

    • Size

      1.2MB

    • MD5

      d273490060b79cb128ed0c011eab3190

    • SHA1

      38bbf083361a288ccb31175e9486ffef24a19181

    • SHA256

      c7e799341a9d829b6e86e3ea062afdd29ac832b014c6fb873c0c467570e697b0

    • SHA512

      3b1b39777705aa31c38edac6536c7b6c2679506504e8b5dc7e261ea64c35b1e312b22ee1862ef6782b986bec14c0df154cbabb988bf41d80a05e99b0b859b9a3

    • SSDEEP

      24576:+UYlFiWVPh2kkkkK4kXkkkkkkkkhLX3a20R0v50+YNpsKv2EvZHp3oWiQ4ca:jYlFiWNbazR0vKLXZ4pca

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks