Overview

overview

10

Static

static

10

NEAS.037bd...c5.exe

windows7-x64

10

NEAS.037bd...c5.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.037bdf299a05c96d09d0ac16919555c5.exe

  • Size

    256KB

  • Sample

    231114-lxmdxaah8w

  • MD5

    037bdf299a05c96d09d0ac16919555c5

  • SHA1

    87d4d5af0c38e322c89f70f5184a9356b5047eeb

  • SHA256

    fc3c514d873d74386b2f54391d8be925e61b4a2bf69af0203cb2802ff86fcac3

  • SHA512

    8ae31f6d6f054a7f491978aa36883f2371312fbd704ecab83f15ab18278a80c9a9bc8ab02ebb37ed53f56d08881f7afe3ddae585e1c7987243844dd08fc39cf8

  • SSDEEP

    6144:YfadWrjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:YyoflpJxifbWGRdA6sQhPbWGRdA6sQxU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.037bdf299a05c96d09d0ac16919555c5.exe

    • Size

      256KB

    • MD5

      037bdf299a05c96d09d0ac16919555c5

    • SHA1

      87d4d5af0c38e322c89f70f5184a9356b5047eeb

    • SHA256

      fc3c514d873d74386b2f54391d8be925e61b4a2bf69af0203cb2802ff86fcac3

    • SHA512

      8ae31f6d6f054a7f491978aa36883f2371312fbd704ecab83f15ab18278a80c9a9bc8ab02ebb37ed53f56d08881f7afe3ddae585e1c7987243844dd08fc39cf8

    • SSDEEP

      6144:YfadWrjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:YyoflpJxifbWGRdA6sQhPbWGRdA6sQxU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks