Overview

overview

10

Static

static

10

NEAS.0a52e...81.exe

windows7-x64

10

NEAS.0a52e...81.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0a52ee93b71b79f886b1091b63bbff81.exe

  • Size

    144KB

  • Sample

    231114-ma925abd3z

  • MD5

    0a52ee93b71b79f886b1091b63bbff81

  • SHA1

    282fae258fb8407827ba3413efd9031058e04b5c

  • SHA256

    8dcfe393b8991eda4ba2010a0548be8aa489ec35dd8c3b901b39dfcbbad41595

  • SHA512

    e3a8b4cf04d9969cb2563506d5dadb297ff5aa4466dc521e1d30076868b723337edab8111f5a7729e99e1b3a24a874e15aec52811fb9a7875cf5ec66a39f3ea3

  • SSDEEP

    3072:AdZOVxMb3sN2HHSMQH2qC7ZQOlzSLUK6MwGsGnDc9nhVizLrId0:AdZTlHHSMQWfdQOhwJ6MwGsmLrId0

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0a52ee93b71b79f886b1091b63bbff81.exe

    • Size

      144KB

    • MD5

      0a52ee93b71b79f886b1091b63bbff81

    • SHA1

      282fae258fb8407827ba3413efd9031058e04b5c

    • SHA256

      8dcfe393b8991eda4ba2010a0548be8aa489ec35dd8c3b901b39dfcbbad41595

    • SHA512

      e3a8b4cf04d9969cb2563506d5dadb297ff5aa4466dc521e1d30076868b723337edab8111f5a7729e99e1b3a24a874e15aec52811fb9a7875cf5ec66a39f3ea3

    • SSDEEP

      3072:AdZOVxMb3sN2HHSMQH2qC7ZQOlzSLUK6MwGsGnDc9nhVizLrId0:AdZTlHHSMQWfdQOhwJ6MwGsmLrId0

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks