Overview

overview

10

Static

static

10

NEAS.abc53...60.exe

windows7-x64

10

NEAS.abc53...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.abc531807dbe715b01fe37b3ffd16c60.exe

  • Size

    82KB

  • Sample

    231115-bg9jdsah71

  • MD5

    abc531807dbe715b01fe37b3ffd16c60

  • SHA1

    72364b08412a9402cd79314b12a9e3a1f27dd0b4

  • SHA256

    7903dbe63caf25ff94d4fcbeffe59441ce0230381bb6276bc3a3f9486b9f9df2

  • SHA512

    3689319a49c0dc42c81ab17c29f0209e4e074dc5078e5e266dbd774727df235b0344b88b8f4cd096843c5e917a54eefa4efc20dff4bebd78ced05ff8d52a1ca1

  • SSDEEP

    1536:yCygBxOY3iuM+vOLgWLf82L7Lpm6+wDSmQFN6TiN1sJtvQu:LygBxOYQ+2ECf1/pm6tm7N6TO1SpD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.abc531807dbe715b01fe37b3ffd16c60.exe

    • Size

      82KB

    • MD5

      abc531807dbe715b01fe37b3ffd16c60

    • SHA1

      72364b08412a9402cd79314b12a9e3a1f27dd0b4

    • SHA256

      7903dbe63caf25ff94d4fcbeffe59441ce0230381bb6276bc3a3f9486b9f9df2

    • SHA512

      3689319a49c0dc42c81ab17c29f0209e4e074dc5078e5e266dbd774727df235b0344b88b8f4cd096843c5e917a54eefa4efc20dff4bebd78ced05ff8d52a1ca1

    • SSDEEP

      1536:yCygBxOY3iuM+vOLgWLf82L7Lpm6+wDSmQFN6TiN1sJtvQu:LygBxOYQ+2ECf1/pm6tm7N6TO1SpD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks