Overview

overview

10

Static

static

10

NEAS.d026f...5b.exe

windows7-x64

10

NEAS.d026f...5b.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d026fcdeda82dcd32cd23edd7f0d785b.exe

  • Size

    243KB

  • Sample

    231112-xe5y3saf4w

  • MD5

    d026fcdeda82dcd32cd23edd7f0d785b

  • SHA1

    95c20a67dc09f587682224a712458c7eb8bda0ee

  • SHA256

    ca74840f2a90a1876ddefd592784fe4b1c942e6b812f6db87b9eb43d59ff9602

  • SHA512

    ccaab086b6d12c58e417a3a6e0eb4dc780411e515655cdec2745b91a34120bf347c3892cc8d12c51f8cb488fcb06649f4a29f75b6aa409d81b7589e6d6f6beb6

  • SSDEEP

    6144:yQ5LHUDuDZIXGNrxzUNaDJvZUvxrQBZg3kFz2so48J:F0DutIchUNaVvZhBZvz2V48J

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d026fcdeda82dcd32cd23edd7f0d785b.exe

    • Size

      243KB

    • MD5

      d026fcdeda82dcd32cd23edd7f0d785b

    • SHA1

      95c20a67dc09f587682224a712458c7eb8bda0ee

    • SHA256

      ca74840f2a90a1876ddefd592784fe4b1c942e6b812f6db87b9eb43d59ff9602

    • SHA512

      ccaab086b6d12c58e417a3a6e0eb4dc780411e515655cdec2745b91a34120bf347c3892cc8d12c51f8cb488fcb06649f4a29f75b6aa409d81b7589e6d6f6beb6

    • SSDEEP

      6144:yQ5LHUDuDZIXGNrxzUNaDJvZUvxrQBZg3kFz2so48J:F0DutIchUNaVvZhBZvz2V48J

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks