Overview

overview

10

Static

static

10

NEAS.73b53...ec.exe

windows7-x64

10

NEAS.73b53...ec.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.73b5345ebf876f55dfbc4cbc1ee7d3ec.exe

  • Size

    391KB

  • Sample

    231112-xbp4fsae31

  • MD5

    73b5345ebf876f55dfbc4cbc1ee7d3ec

  • SHA1

    db420cbe82101eef1d9155648a3a76a0a0fd0d25

  • SHA256

    5fbb1d57b2bc0ebde682f0b00f29961fdf1b2779af9d25032c02a8e1b38a0210

  • SHA512

    4a3ef67d1b2b4e6e20decac0313861567d0d6f7bf47dcfb786b180874c25128e6329ac64c76ae7c9b85297738b9b5da099e686cd4ca4d3b0a124b34f02ad7323

  • SSDEEP

    12288:iQ9T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:iQV9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.73b5345ebf876f55dfbc4cbc1ee7d3ec.exe

    • Size

      391KB

    • MD5

      73b5345ebf876f55dfbc4cbc1ee7d3ec

    • SHA1

      db420cbe82101eef1d9155648a3a76a0a0fd0d25

    • SHA256

      5fbb1d57b2bc0ebde682f0b00f29961fdf1b2779af9d25032c02a8e1b38a0210

    • SHA512

      4a3ef67d1b2b4e6e20decac0313861567d0d6f7bf47dcfb786b180874c25128e6329ac64c76ae7c9b85297738b9b5da099e686cd4ca4d3b0a124b34f02ad7323

    • SSDEEP

      12288:iQ9T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:iQV9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks