Overview

overview

10

Static

static

10

NEAS.f7463...e0.exe

windows7-x64

10

NEAS.f7463...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f7463ea2f2834bf90d173df70bf394e0.exe

  • Size

    459KB

  • Sample

    231112-qjsqzsgb4w

  • MD5

    f7463ea2f2834bf90d173df70bf394e0

  • SHA1

    1a7603afbaa86f5d3ca7d875945558c5e15c6e8a

  • SHA256

    7064e19db9fe2746c708a757d0caf4c4de39ae4ab9dcb4777c5765ff69bb14fb

  • SHA512

    1e7299a044b7acdf3e70f8fe44c58080e230260feba14353f758661022c848f7ff0a75409b08023d19ac6feb25cfbb1d86d39c818f11c077152843bb11e59830

  • SSDEEP

    12288:zkKwIaJwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdt:zkKwLJwFfDy/phgeczlqczZd7LFB3oFl

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f7463ea2f2834bf90d173df70bf394e0.exe

    • Size

      459KB

    • MD5

      f7463ea2f2834bf90d173df70bf394e0

    • SHA1

      1a7603afbaa86f5d3ca7d875945558c5e15c6e8a

    • SHA256

      7064e19db9fe2746c708a757d0caf4c4de39ae4ab9dcb4777c5765ff69bb14fb

    • SHA512

      1e7299a044b7acdf3e70f8fe44c58080e230260feba14353f758661022c848f7ff0a75409b08023d19ac6feb25cfbb1d86d39c818f11c077152843bb11e59830

    • SSDEEP

      12288:zkKwIaJwIKfDy/phgeczlqczZd7LFB3oFHoGnFjVZnykJGvpHGdt:zkKwLJwFfDy/phgeczlqczZd7LFB3oFl

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks