Overview

overview

10

Static

static

10

NEAS.383c3...50.exe

windows7-x64

10

NEAS.383c3...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.383c3aa928987f021ec71bea366e4a50.exe

  • Size

    67KB

  • Sample

    231115-dcxedacc2t

  • MD5

    383c3aa928987f021ec71bea366e4a50

  • SHA1

    405b870a2caf1374507060d568392ea06589b945

  • SHA256

    ea8914d30d124e5f7cd8671fe8eed42cc8d05815c2d985d8b89e475b7943320d

  • SHA512

    8c9df32b99a4568aeab1c379499d85d6bfee8048d8770e25e6f798898f2e1bca513edd1da5038c0ca52cb69a5e7bf0985e245f8fb36de474c36cdc452cd13d9f

  • SSDEEP

    1536:91ehQKaEzuTqAoh8zrOH5POBOoRs48pZV6UqIBiHLdrsJifTduD4oTxw:LQJzuTqAoh8zCH5POBOoCvZAI+rsJib7

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.383c3aa928987f021ec71bea366e4a50.exe

    • Size

      67KB

    • MD5

      383c3aa928987f021ec71bea366e4a50

    • SHA1

      405b870a2caf1374507060d568392ea06589b945

    • SHA256

      ea8914d30d124e5f7cd8671fe8eed42cc8d05815c2d985d8b89e475b7943320d

    • SHA512

      8c9df32b99a4568aeab1c379499d85d6bfee8048d8770e25e6f798898f2e1bca513edd1da5038c0ca52cb69a5e7bf0985e245f8fb36de474c36cdc452cd13d9f

    • SSDEEP

      1536:91ehQKaEzuTqAoh8zrOH5POBOoRs48pZV6UqIBiHLdrsJifTduD4oTxw:LQJzuTqAoh8zCH5POBOoCvZAI+rsJib7

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks