Overview

overview

10

Static

static

10

NEAS.ef951...60.exe

windows7-x64

10

NEAS.ef951...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ef951bb9cea65723840edecd6a91f960.exe

  • Size

    93KB

  • Sample

    231115-g7dgjaeg7x

  • MD5

    ef951bb9cea65723840edecd6a91f960

  • SHA1

    d0d7446685d705cef79183bfeb109a3d9ae1b909

  • SHA256

    c1f7e5ed98db5f78b814f746cc30685f216b778834388ce74a1360621f9ae3d8

  • SHA512

    904f7fcaf3112b0f317e899a9f17dae05c709fb245403935466717f39ca79622bd9f6e281fdf302989379cb155d664619a100f8e7efec7e68387e444a67fb5bb

  • SSDEEP

    1536:n++thKLmy3iM00L9KxHO4roxyOTw7D362W6/3uGZGmtxftZS2/rQCVT7jiwg58:nL+1yAZcHdox3TY2Sfu2Gu9/S2DPVDY6

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ef951bb9cea65723840edecd6a91f960.exe

    • Size

      93KB

    • MD5

      ef951bb9cea65723840edecd6a91f960

    • SHA1

      d0d7446685d705cef79183bfeb109a3d9ae1b909

    • SHA256

      c1f7e5ed98db5f78b814f746cc30685f216b778834388ce74a1360621f9ae3d8

    • SHA512

      904f7fcaf3112b0f317e899a9f17dae05c709fb245403935466717f39ca79622bd9f6e281fdf302989379cb155d664619a100f8e7efec7e68387e444a67fb5bb

    • SSDEEP

      1536:n++thKLmy3iM00L9KxHO4roxyOTw7D362W6/3uGZGmtxftZS2/rQCVT7jiwg58:nL+1yAZcHdox3TY2Sfu2Gu9/S2DPVDY6

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks