Overview

overview

10

Static

static

10

NEAS.5e440...80.exe

windows7-x64

10

NEAS.5e440...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.5e440c7b1250863ba964ee1dc86ac880.exe

  • Size

    379KB

  • Sample

    231112-ysrjaabc3w

  • MD5

    5e440c7b1250863ba964ee1dc86ac880

  • SHA1

    ae38272322b739e74e014bf5ecdde32e000448eb

  • SHA256

    055893db2b5ba4c7276fba13b6c884873578d6d8e72a9b8e4e678d40369d9be2

  • SHA512

    e2ce40c5999bb0431d92194bac1a08afca5a6cf0f9a2d404967baba2c5b0c4de8ae35e9a4d13c805c2caa70bdf6e66594610af4248050b62a6373870b26db65c

  • SSDEEP

    6144:hxayPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsb:hx/uqFHRFbeE8m5s

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.5e440c7b1250863ba964ee1dc86ac880.exe

    • Size

      379KB

    • MD5

      5e440c7b1250863ba964ee1dc86ac880

    • SHA1

      ae38272322b739e74e014bf5ecdde32e000448eb

    • SHA256

      055893db2b5ba4c7276fba13b6c884873578d6d8e72a9b8e4e678d40369d9be2

    • SHA512

      e2ce40c5999bb0431d92194bac1a08afca5a6cf0f9a2d404967baba2c5b0c4de8ae35e9a4d13c805c2caa70bdf6e66594610af4248050b62a6373870b26db65c

    • SSDEEP

      6144:hxayPXuapoaCPXbo92ynnZlVrtv35CPXbo92ynn8sbeWDSpaH8m30gsb:hx/uqFHRFbeE8m5s

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks