Overview

overview

10

Static

static

10

NEAS.ba672...88.exe

windows7-x64

NEAS.ba672...88.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ba6721c399b0d23c05ec277fb4daa488.exe

  • Size

    123KB

  • Sample

    231114-lpen4abb97

  • MD5

    ba6721c399b0d23c05ec277fb4daa488

  • SHA1

    7dfd3d8c83804d817c8ef7b8c794173161454575

  • SHA256

    96ee472b297ba038bc00b452b2fba87eb52fbe6539f4db055537faef6d415e0b

  • SHA512

    5c4e387b2ff96a2d696d7af2398def409b1ea4341f66859569f99b53eee682734c6e51f93864b48dadf4fd070baa992f1435aa5e2976de0b2e44d4ed36030b36

  • SSDEEP

    3072:FE5NOig7esUYqYpqMTAcmIRYSa9rR85DEn5k7r8:FEmig7ehhnlI4rQD85k/8

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ba6721c399b0d23c05ec277fb4daa488.exe

    • Size

      123KB

    • MD5

      ba6721c399b0d23c05ec277fb4daa488

    • SHA1

      7dfd3d8c83804d817c8ef7b8c794173161454575

    • SHA256

      96ee472b297ba038bc00b452b2fba87eb52fbe6539f4db055537faef6d415e0b

    • SHA512

      5c4e387b2ff96a2d696d7af2398def409b1ea4341f66859569f99b53eee682734c6e51f93864b48dadf4fd070baa992f1435aa5e2976de0b2e44d4ed36030b36

    • SSDEEP

      3072:FE5NOig7esUYqYpqMTAcmIRYSa9rR85DEn5k7r8:FEmig7ehhnlI4rQD85k/8

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks