Overview

overview

10

Static

static

10

NEAS.43824...20.exe

windows7-x64

10

NEAS.43824...20.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4382477a877713fb4a4bff9a536b5620.exe

  • Size

    135KB

  • Sample

    231113-apy7ysec91

  • MD5

    4382477a877713fb4a4bff9a536b5620

  • SHA1

    0f528f6a0435069420d795ed3db640fa14f8b98d

  • SHA256

    9543084c2daab4d2c59967e70274045443055f041cf4cf16f2f11aa765d96bc8

  • SHA512

    1b0dbe9e3060d0ed8289bde08571042c2b1311fe7526a681bc1ff2eab2e3aeaf045575a89114fbd44d00c312730b694626305670425a407962c6d1e128e9a95b

  • SSDEEP

    3072:DIdagrndrui46nGYw/wTjK8Qr5+ViKGe7Yfs0a0Uoi:kdVIgnGl/wTjK9cViK4fs0l

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4382477a877713fb4a4bff9a536b5620.exe

    • Size

      135KB

    • MD5

      4382477a877713fb4a4bff9a536b5620

    • SHA1

      0f528f6a0435069420d795ed3db640fa14f8b98d

    • SHA256

      9543084c2daab4d2c59967e70274045443055f041cf4cf16f2f11aa765d96bc8

    • SHA512

      1b0dbe9e3060d0ed8289bde08571042c2b1311fe7526a681bc1ff2eab2e3aeaf045575a89114fbd44d00c312730b694626305670425a407962c6d1e128e9a95b

    • SSDEEP

      3072:DIdagrndrui46nGYw/wTjK8Qr5+ViKGe7Yfs0a0Uoi:kdVIgnGl/wTjK9cViK4fs0l

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks