Overview

overview

10

Static

static

10

NEAS.03284...8b.exe

windows7-x64

NEAS.03284...8b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0328471846e820a6523d97f80e11038b.exe

  • Size

    425KB

  • Sample

    231112-wlw43shh8w

  • MD5

    0328471846e820a6523d97f80e11038b

  • SHA1

    e5848cd715c6ad08438d4f605e5ffc47891d2382

  • SHA256

    81b3301ab03eda35aa5f9c7523bae9b4e5f1a8ab82cf0d77b059ab5c66c06445

  • SHA512

    6df81151d2e3a2f93fb150fc78de130ac8dda7c163027ad4ce2a9e28aa6d1ad6f312ff35c9796718fce812737b0cbda7e283c176554a59eb94faa34e9d92ee48

  • SSDEEP

    12288:2AoWV4ZoivKryz32XXf9Do3+IviDwf+Fo:RV4ZoivKryDa10+IviDwf+Fo

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0328471846e820a6523d97f80e11038b.exe

    • Size

      425KB

    • MD5

      0328471846e820a6523d97f80e11038b

    • SHA1

      e5848cd715c6ad08438d4f605e5ffc47891d2382

    • SHA256

      81b3301ab03eda35aa5f9c7523bae9b4e5f1a8ab82cf0d77b059ab5c66c06445

    • SHA512

      6df81151d2e3a2f93fb150fc78de130ac8dda7c163027ad4ce2a9e28aa6d1ad6f312ff35c9796718fce812737b0cbda7e283c176554a59eb94faa34e9d92ee48

    • SSDEEP

      12288:2AoWV4ZoivKryz32XXf9Do3+IviDwf+Fo:RV4ZoivKryDa10+IviDwf+Fo

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks