Overview

overview

10

Static

static

10

NEAS.0bae6...82.exe

windows7-x64

10

NEAS.0bae6...82.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0bae6973e5f0556610e3629bb04de282.exe

  • Size

    224KB

  • Sample

    231114-kwtk6aaf44

  • MD5

    0bae6973e5f0556610e3629bb04de282

  • SHA1

    a3fffa3b3f920db14432efcaecd92d631027f811

  • SHA256

    cd6b364da571c8d11d49ae3d761d4f64b1f5b5602be0c4096bb99e6a59133dfc

  • SHA512

    8daeb6adbeeba8f9d0b96eb7e69dc23e93560c1787e2f536938d892a5533a3e3e2b94e0f399c9dc755467f7ee27a8dd7b6775f6893fa9f8ae83a09d2a8bffb1f

  • SSDEEP

    3072:c5p+2Bqj8TwcMHuNDIE5fYC11Pgrey4pwoTRBmDRGGurhUXvBj2QE2HegPelTeI7:4VMPcN5IW6yKm7U5j2QE2+g24Id2jFH8

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0bae6973e5f0556610e3629bb04de282.exe

    • Size

      224KB

    • MD5

      0bae6973e5f0556610e3629bb04de282

    • SHA1

      a3fffa3b3f920db14432efcaecd92d631027f811

    • SHA256

      cd6b364da571c8d11d49ae3d761d4f64b1f5b5602be0c4096bb99e6a59133dfc

    • SHA512

      8daeb6adbeeba8f9d0b96eb7e69dc23e93560c1787e2f536938d892a5533a3e3e2b94e0f399c9dc755467f7ee27a8dd7b6775f6893fa9f8ae83a09d2a8bffb1f

    • SSDEEP

      3072:c5p+2Bqj8TwcMHuNDIE5fYC11Pgrey4pwoTRBmDRGGurhUXvBj2QE2HegPelTeI7:4VMPcN5IW6yKm7U5j2QE2+g24Id2jFH8

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks