Overview

overview

10

Static

static

10

NEAS.e2254...10.exe

windows7-x64

10

NEAS.e2254...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e225432eec322eb6a202cbc30bb57510.exe

  • Size

    347KB

  • Sample

    231113-f892fsad65

  • MD5

    e225432eec322eb6a202cbc30bb57510

  • SHA1

    d6306fe7b5c6dd670bb844e0337938fb7b6b29af

  • SHA256

    2e231c353e5908efbdfcf28be8f5c9fd45cb68749d808518ed4d6cdc4bd04ede

  • SHA512

    ffe1fc6ce09b70dd9b535864532d0b670954a9fd5690891474911c24d7f3ec94511e2abd1ae9426fa4475fe3287ff2c755d63614af19df470f2d947796efcff3

  • SSDEEP

    6144:nneUOTWDBxp5ox4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:nEa1xYx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e225432eec322eb6a202cbc30bb57510.exe

    • Size

      347KB

    • MD5

      e225432eec322eb6a202cbc30bb57510

    • SHA1

      d6306fe7b5c6dd670bb844e0337938fb7b6b29af

    • SHA256

      2e231c353e5908efbdfcf28be8f5c9fd45cb68749d808518ed4d6cdc4bd04ede

    • SHA512

      ffe1fc6ce09b70dd9b535864532d0b670954a9fd5690891474911c24d7f3ec94511e2abd1ae9426fa4475fe3287ff2c755d63614af19df470f2d947796efcff3

    • SSDEEP

      6144:nneUOTWDBxp5ox4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:nEa1xYx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks