Overview

overview

10

Static

static

10

NEAS.882d1...90.exe

windows7-x64

10

NEAS.882d1...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.882d1e97f7854056ef16c2dcd8959990.exe

  • Size

    255KB

  • Sample

    231113-e27gbahf36

  • MD5

    882d1e97f7854056ef16c2dcd8959990

  • SHA1

    4b97fe52c24749e44f3d52132e106f567ab8ac6b

  • SHA256

    5430a02c841119255097197d75f05cbbf8dcba6e9d10eec5cc57e76188bcc447

  • SHA512

    be75cba141989bff6a850c28cebb1279646313c48323ace1ed47c839aaab11e8f455b55af7664a24d7b873ccb1e050a2c0f6ff17dc61147800cd5d084f62a7ac

  • SSDEEP

    3072:tLODE4BsJ7DsTAbw8asCHNhMXi6Y0HYSx9m9jqLsFmsdYXmAMS3KUUibN8ohXiH6:IBsZ6Ab2xUS6UJjwszeXmDZUH8aiGaEP

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.882d1e97f7854056ef16c2dcd8959990.exe

    • Size

      255KB

    • MD5

      882d1e97f7854056ef16c2dcd8959990

    • SHA1

      4b97fe52c24749e44f3d52132e106f567ab8ac6b

    • SHA256

      5430a02c841119255097197d75f05cbbf8dcba6e9d10eec5cc57e76188bcc447

    • SHA512

      be75cba141989bff6a850c28cebb1279646313c48323ace1ed47c839aaab11e8f455b55af7664a24d7b873ccb1e050a2c0f6ff17dc61147800cd5d084f62a7ac

    • SSDEEP

      3072:tLODE4BsJ7DsTAbw8asCHNhMXi6Y0HYSx9m9jqLsFmsdYXmAMS3KUUibN8ohXiH6:IBsZ6Ab2xUS6UJjwszeXmDZUH8aiGaEP

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks