Overview

overview

10

Static

static

10

NEAS.48417...10.exe

windows7-x64

10

NEAS.48417...10.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4841782c9864bee913721e5797dc2d10.exe

  • Size

    463KB

  • Sample

    231115-ad1lmsac4z

  • MD5

    4841782c9864bee913721e5797dc2d10

  • SHA1

    7e61a7eeb377d0aa8586e510fab4a03bca77f164

  • SHA256

    d4422b51e50ea05bcdb0ca117358fe0d0b45cb9f5689e5a4d5a6b8bfaadc4540

  • SHA512

    894880d7a4175ca3e9d79a38a53eab5ec446d4453d5ca289826bb6f8da5743034a005aaa103fc17733ab5a540f9d9f2641dcfc6b3b71296f3a302fe679d399df

  • SSDEEP

    12288:H+Gy4s5t6NSN6G5tb0fX5t6NSN6G5tTvz:H+34Dc6C0ec6gvz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4841782c9864bee913721e5797dc2d10.exe

    • Size

      463KB

    • MD5

      4841782c9864bee913721e5797dc2d10

    • SHA1

      7e61a7eeb377d0aa8586e510fab4a03bca77f164

    • SHA256

      d4422b51e50ea05bcdb0ca117358fe0d0b45cb9f5689e5a4d5a6b8bfaadc4540

    • SHA512

      894880d7a4175ca3e9d79a38a53eab5ec446d4453d5ca289826bb6f8da5743034a005aaa103fc17733ab5a540f9d9f2641dcfc6b3b71296f3a302fe679d399df

    • SSDEEP

      12288:H+Gy4s5t6NSN6G5tb0fX5t6NSN6G5tTvz:H+34Dc6C0ec6gvz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks