Overview

overview

10

Static

static

10

NEAS.037a6...30.exe

windows7-x64

10

NEAS.037a6...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.037a6aef063cb159dcd4d5ee5631e830.exe

  • Size

    367KB

  • Sample

    231113-e6vnbahc81

  • MD5

    037a6aef063cb159dcd4d5ee5631e830

  • SHA1

    876d1d6033f512e223db2d636c5dea6111f39f9b

  • SHA256

    0ee70c67d89b44dce1b87faf2be10e4372a6bd40ddab4e7a4b3d7a3170185118

  • SHA512

    155d73b47490d2918471bf90d29e3c784402f4eefa3d3f8db4b372d94e799acbc911f8d2f5b3c084f76cd51c819d5e8417b638fef0a0743f64c92449567387d8

  • SSDEEP

    6144:cSqGw2jr8tnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:5wvtJCXqP77D7FB24lwR45FB24lqM

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.037a6aef063cb159dcd4d5ee5631e830.exe

    • Size

      367KB

    • MD5

      037a6aef063cb159dcd4d5ee5631e830

    • SHA1

      876d1d6033f512e223db2d636c5dea6111f39f9b

    • SHA256

      0ee70c67d89b44dce1b87faf2be10e4372a6bd40ddab4e7a4b3d7a3170185118

    • SHA512

      155d73b47490d2918471bf90d29e3c784402f4eefa3d3f8db4b372d94e799acbc911f8d2f5b3c084f76cd51c819d5e8417b638fef0a0743f64c92449567387d8

    • SSDEEP

      6144:cSqGw2jr8tnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:5wvtJCXqP77D7FB24lwR45FB24lqM

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks