Overview

overview

10

Static

static

10

NEAS.b0302...ee.exe

windows7-x64

10

NEAS.b0302...ee.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b0302b7c9625f3d46f0b0c1c7fce0cee.exe

  • Size

    143KB

  • Sample

    231115-tgblgacb64

  • MD5

    b0302b7c9625f3d46f0b0c1c7fce0cee

  • SHA1

    2f03a2fca7ee6e6cf6e8949c0f38d2bfd6938a81

  • SHA256

    4036c50017216fd7882603f1ace1ffe953577ea84c064f60552b726b6aa7f656

  • SHA512

    61f98fa45b2e53bd4183262c10450efb44436e4bb4615e5643bd89cb209ccffa52db2ac5b6ae83d0268b8892205e30490585114510010390b4dd129b28518336

  • SSDEEP

    1536:mOpQfRQ9NtWDVcRBd7DrbUQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:mOpQf/DOL/3N93bsGfhv0vt3y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b0302b7c9625f3d46f0b0c1c7fce0cee.exe

    • Size

      143KB

    • MD5

      b0302b7c9625f3d46f0b0c1c7fce0cee

    • SHA1

      2f03a2fca7ee6e6cf6e8949c0f38d2bfd6938a81

    • SHA256

      4036c50017216fd7882603f1ace1ffe953577ea84c064f60552b726b6aa7f656

    • SHA512

      61f98fa45b2e53bd4183262c10450efb44436e4bb4615e5643bd89cb209ccffa52db2ac5b6ae83d0268b8892205e30490585114510010390b4dd129b28518336

    • SSDEEP

      1536:mOpQfRQ9NtWDVcRBd7DrbUQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:mOpQf/DOL/3N93bsGfhv0vt3y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks