Overview

overview

10

Static

static

10

NEAS.27248...b0.exe

windows7-x64

10

NEAS.27248...b0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.27248d3a93ec0748af001caf9fc182b0.exe

  • Size

    268KB

  • Sample

    231115-ctt5xaaf27

  • MD5

    27248d3a93ec0748af001caf9fc182b0

  • SHA1

    c3bde2de1bc732c2886daa5df1db186206ec87a5

  • SHA256

    80822f705c03fd90f8f5bcffa51ae186e944065344d2d07c3b2699c8c3fe820e

  • SHA512

    989bfa6e3e65e1650bb9978a9b425ec2f859521b4456cccd43679b6e5fa2eb3f3f6da739c97e70cb0efb12b2cedc11efc2680d5b31fa0930b24901b9ec5cb5b3

  • SSDEEP

    6144:OoHrCvlKmTJKPt6K8ikCV4meYCDyrkFV/Zpw5p3WOt11+UdDt7KDTZkAMw06:OoH+v1Jk6K8/64mlCDyrkFV/ZS5pGOs1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.27248d3a93ec0748af001caf9fc182b0.exe

    • Size

      268KB

    • MD5

      27248d3a93ec0748af001caf9fc182b0

    • SHA1

      c3bde2de1bc732c2886daa5df1db186206ec87a5

    • SHA256

      80822f705c03fd90f8f5bcffa51ae186e944065344d2d07c3b2699c8c3fe820e

    • SHA512

      989bfa6e3e65e1650bb9978a9b425ec2f859521b4456cccd43679b6e5fa2eb3f3f6da739c97e70cb0efb12b2cedc11efc2680d5b31fa0930b24901b9ec5cb5b3

    • SSDEEP

      6144:OoHrCvlKmTJKPt6K8ikCV4meYCDyrkFV/Zpw5p3WOt11+UdDt7KDTZkAMw06:OoH+v1Jk6K8/64mlCDyrkFV/ZS5pGOs1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks