Overview

overview

10

Static

static

10

NEAS.0ae1d...30.exe

windows7-x64

10

NEAS.0ae1d...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.0ae1d069fb32eb0d1b5f3951de4af030.exe

  • Size

    89KB

  • Sample

    231115-bzyjvabc2y

  • MD5

    0ae1d069fb32eb0d1b5f3951de4af030

  • SHA1

    54002c4ac2459e7be4a794436ea755abf9fb02cc

  • SHA256

    2bae72dfed23f692ff088f685e27c19ede9186a88c805df5172f43da615b70c6

  • SHA512

    9af0ff14a47c6b0acd4e888fa6d39e4be6ef62bb5178adbe155fce6728ca97d995d3288733bfd58d5024d953c759590c58406c05b8db0cefd9b7cf80a231e297

  • SSDEEP

    1536:fq4rtHkA/IketmNHX8scmc38VaEok7tXT1YWxcjlExkg8Fk:f7EA/VesBXHc31Eow7cjlakgwk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0ae1d069fb32eb0d1b5f3951de4af030.exe

    • Size

      89KB

    • MD5

      0ae1d069fb32eb0d1b5f3951de4af030

    • SHA1

      54002c4ac2459e7be4a794436ea755abf9fb02cc

    • SHA256

      2bae72dfed23f692ff088f685e27c19ede9186a88c805df5172f43da615b70c6

    • SHA512

      9af0ff14a47c6b0acd4e888fa6d39e4be6ef62bb5178adbe155fce6728ca97d995d3288733bfd58d5024d953c759590c58406c05b8db0cefd9b7cf80a231e297

    • SSDEEP

      1536:fq4rtHkA/IketmNHX8scmc38VaEok7tXT1YWxcjlExkg8Fk:f7EA/VesBXHc31Eow7cjlakgwk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks