Overview

overview

10

Static

static

10

NEAS.edadc...e0.exe

windows7-x64

10

NEAS.edadc...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.edadc99073b36870e714e7cc943dbee0.exe

  • Size

    93KB

  • Sample

    231116-1a9y1sfg48

  • MD5

    edadc99073b36870e714e7cc943dbee0

  • SHA1

    70f5e604097a600f7f011ecfe93f90a8e397f5b5

  • SHA256

    eee83d409bb715da281d531e9e9be33f4bb8518c09f3254bb6d5452991010076

  • SHA512

    dfc3d3d309e0754488b3a4346b2f58b6110d8d275afb031b910b2f2d1be93594d33681304d3fb7a8de6d4ae3c3c8a39cb3aef0aeba1c732860e933851dce294e

  • SSDEEP

    1536:TvpNmMJ70pY/PzQuG7IgXiDbH9qqtU7CkFgTjebmb/TFsjiwg58:LpNmMEY/PzQb7IgSDrvkeTC6WY58

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.edadc99073b36870e714e7cc943dbee0.exe

    • Size

      93KB

    • MD5

      edadc99073b36870e714e7cc943dbee0

    • SHA1

      70f5e604097a600f7f011ecfe93f90a8e397f5b5

    • SHA256

      eee83d409bb715da281d531e9e9be33f4bb8518c09f3254bb6d5452991010076

    • SHA512

      dfc3d3d309e0754488b3a4346b2f58b6110d8d275afb031b910b2f2d1be93594d33681304d3fb7a8de6d4ae3c3c8a39cb3aef0aeba1c732860e933851dce294e

    • SSDEEP

      1536:TvpNmMJ70pY/PzQuG7IgXiDbH9qqtU7CkFgTjebmb/TFsjiwg58:LpNmMEY/PzQb7IgSDrvkeTC6WY58

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks