Overview

overview

10

Static

static

10

NEAS.22838...40.exe

windows7-x64

10

NEAS.22838...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.22838e830a160089e8f03d96f5a0e340.exe

  • Size

    304KB

  • Sample

    231115-jltmqsed59

  • MD5

    22838e830a160089e8f03d96f5a0e340

  • SHA1

    5d2cd12411ef5abb29a6ad07fd33445c177ab52b

  • SHA256

    90e5133299e3e14033500e1c5e4b8436824aa5bb26ac1130405e577797d7ef81

  • SHA512

    c53169f7b110531ab5333ba435b85419b363cc1fa542d7826f27a5ad03744730aafdae4da9749a3445ce7f97c779fd257d3ac9c208c957ae058d5d78a9f253a3

  • SSDEEP

    6144:rdGsxa61eKh6FeJLbnCBbC+nVLjOPj194oQAPJiduHyFfeoHiWmVlWaPxqZcNpCF:RjQMkFeJLbnCN3xjOPj1Gg2uHyFfeoHV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.22838e830a160089e8f03d96f5a0e340.exe

    • Size

      304KB

    • MD5

      22838e830a160089e8f03d96f5a0e340

    • SHA1

      5d2cd12411ef5abb29a6ad07fd33445c177ab52b

    • SHA256

      90e5133299e3e14033500e1c5e4b8436824aa5bb26ac1130405e577797d7ef81

    • SHA512

      c53169f7b110531ab5333ba435b85419b363cc1fa542d7826f27a5ad03744730aafdae4da9749a3445ce7f97c779fd257d3ac9c208c957ae058d5d78a9f253a3

    • SSDEEP

      6144:rdGsxa61eKh6FeJLbnCBbC+nVLjOPj194oQAPJiduHyFfeoHiWmVlWaPxqZcNpCF:RjQMkFeJLbnCN3xjOPj1Gg2uHyFfeoHV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks