Overview

overview

10

Static

static

10

NEAS.63823...f0.exe

windows7-x64

10

NEAS.63823...f0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.638232f1930ab936b636e8cba3b368f0.exe

  • Size

    122KB

  • Sample

    231113-fr3k2sab54

  • MD5

    638232f1930ab936b636e8cba3b368f0

  • SHA1

    5d275a4e8dab32b7b768d5d20c0e603c314a4fa3

  • SHA256

    1c93d4da44e23daad1b9368555b0cb1b8efe7ecdd604e3d536f3b8a4cf16c311

  • SHA512

    3c588c5904abcc7ec1e256e1748a2e4878e4f17eca101870b0bccd92d652e72a57efd6f433079a5a8cd9d6baa64ed3d8836997a6fe72a7f9677b77d1ded3a3db

  • SSDEEP

    1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4r:6u8ANCUdgfmD7zey0KUj6TjR9i4r

Score
10/10
berbewdropperevasionpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.638232f1930ab936b636e8cba3b368f0.exe

    • Size

      122KB

    • MD5

      638232f1930ab936b636e8cba3b368f0

    • SHA1

      5d275a4e8dab32b7b768d5d20c0e603c314a4fa3

    • SHA256

      1c93d4da44e23daad1b9368555b0cb1b8efe7ecdd604e3d536f3b8a4cf16c311

    • SHA512

      3c588c5904abcc7ec1e256e1748a2e4878e4f17eca101870b0bccd92d652e72a57efd6f433079a5a8cd9d6baa64ed3d8836997a6fe72a7f9677b77d1ded3a3db

    • SSDEEP

      1536:lvm1Fu8AjYaFwjRUdW7fmyY7aZYJVmy0KQbj6vbjuKoauGi4r:6u8ANCUdgfmD7zey0KUj6TjR9i4r

    Score
    10/10
    dropperevasionpersistencetrojan

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Modifies visibility of file extensions in Explorer

      evasion

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks