Overview

overview

10

Static

static

10

NEAS.b15b9...60.exe

windows7-x64

10

NEAS.b15b9...60.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b15b931f728c65ef42175d4c70807860.exe

  • Size

    833KB

  • Sample

    231113-fxyjaahg8v

  • MD5

    b15b931f728c65ef42175d4c70807860

  • SHA1

    e61031a1ff3d37373ffd942a5ec651a2f485b8ef

  • SHA256

    6561bc15f31cb2057e17e85b907697534ab7565bd04ead38eeda684ac7ea65d5

  • SHA512

    629c2245e4bb31fc246a6dcfb7eeab2516f28dabf244fa61333a5263842bb17d950ee5a42ce1428a59e1f1c408d589aa3bf600cf8cb5aa8064a20649b96e7352

  • SSDEEP

    24576:B+dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIsg:kdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b15b931f728c65ef42175d4c70807860.exe

    • Size

      833KB

    • MD5

      b15b931f728c65ef42175d4c70807860

    • SHA1

      e61031a1ff3d37373ffd942a5ec651a2f485b8ef

    • SHA256

      6561bc15f31cb2057e17e85b907697534ab7565bd04ead38eeda684ac7ea65d5

    • SHA512

      629c2245e4bb31fc246a6dcfb7eeab2516f28dabf244fa61333a5263842bb17d950ee5a42ce1428a59e1f1c408d589aa3bf600cf8cb5aa8064a20649b96e7352

    • SSDEEP

      24576:B+dXHfNIVyeNIVy2jU13fS2hEYM9RIPqcNaAarJWw6j0dFZg0ZktGlIOfSJbuIsg:kdXeyjC3a2hEY2RIPqcNaAarJWwq0dFo

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks