Overview

overview

10

Static

static

10

NEAS.de049...30.exe

windows7-x64

10

NEAS.de049...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.de04939021c18f4c5e23d96ed498ee30.exe

  • Size

    79KB

  • Sample

    231112-24cfaaea35

  • MD5

    de04939021c18f4c5e23d96ed498ee30

  • SHA1

    80176d5481febfcb480eedba84ba72226a066be8

  • SHA256

    a44df10edc6265c0a662bb55b7c73a4828fccc14b61acc62175f7ae8b653e49c

  • SHA512

    04173eb556736808ac4c2e4231f2981c61c2661551aa2ebf8919e7e36f4bbc38424ab254528e051ee7a44cbbe2e8ea78d59141e1d8e44695a9bb10ee46f34b0c

  • SSDEEP

    1536:I3riYYcWFQWQvNnjn2RmnAgV+eetdIDZrI1jHJZrR:I3WYkbMNnz2XeetdIDu1jHJ9R

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.de04939021c18f4c5e23d96ed498ee30.exe

    • Size

      79KB

    • MD5

      de04939021c18f4c5e23d96ed498ee30

    • SHA1

      80176d5481febfcb480eedba84ba72226a066be8

    • SHA256

      a44df10edc6265c0a662bb55b7c73a4828fccc14b61acc62175f7ae8b653e49c

    • SHA512

      04173eb556736808ac4c2e4231f2981c61c2661551aa2ebf8919e7e36f4bbc38424ab254528e051ee7a44cbbe2e8ea78d59141e1d8e44695a9bb10ee46f34b0c

    • SSDEEP

      1536:I3riYYcWFQWQvNnjn2RmnAgV+eetdIDZrI1jHJZrR:I3WYkbMNnz2XeetdIDu1jHJ9R

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks