Overview

overview

10

Static

static

10

NEAS.4949a...d0.exe

windows7-x64

10

NEAS.4949a...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4949aa5368459b17b6c026286db0a4d0.exe

  • Size

    130KB

  • Sample

    231112-z6hnzace47

  • MD5

    4949aa5368459b17b6c026286db0a4d0

  • SHA1

    5ee579ff700ba474e2c27ef2b6424786d3d3ba2e

  • SHA256

    340cbf429d054c2963fdbb4fda1eff95e48249ed99ca1809f0532a5d7735f099

  • SHA512

    311904b991e4048d4050482f1cac63dff13be74ca78c1c8dabc607dd7b5b7f8cf0cf583f28ae1d634f0efa83db1a163ed512e208054d647dbd3c4fcf60163064

  • SSDEEP

    3072:o6xonc8jG02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:Jxv8jr4BhHmNEcYj9nhV8NCV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4949aa5368459b17b6c026286db0a4d0.exe

    • Size

      130KB

    • MD5

      4949aa5368459b17b6c026286db0a4d0

    • SHA1

      5ee579ff700ba474e2c27ef2b6424786d3d3ba2e

    • SHA256

      340cbf429d054c2963fdbb4fda1eff95e48249ed99ca1809f0532a5d7735f099

    • SHA512

      311904b991e4048d4050482f1cac63dff13be74ca78c1c8dabc607dd7b5b7f8cf0cf583f28ae1d634f0efa83db1a163ed512e208054d647dbd3c4fcf60163064

    • SSDEEP

      3072:o6xonc8jG02/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:Jxv8jr4BhHmNEcYj9nhV8NCV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks