Overview

overview

10

Static

static

10

NEAS.f5e44...30.exe

windows7-x64

10

NEAS.f5e44...30.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f5e442e6945d30c986049140f9e2b930.exe

  • Size

    128KB

  • Sample

    231116-3d1wmacg2t

  • MD5

    f5e442e6945d30c986049140f9e2b930

  • SHA1

    6344adebe235c26459d268f2e86eb31b81abb1ea

  • SHA256

    aa666491dabec0d29280b85c58592bd90fb18e0e0b606a4e6e8a4c0263aa9dea

  • SHA512

    3822350ad9619c3ab517d6dbea38d63c7e984960ca218f576676430694700f7422b454b44fb5efec05746c199d7bacfdeb37f42bb543ff7ee6933a02a2d99d0d

  • SSDEEP

    1536:yR0caUAJAs/N3SddfFFxlcq5JzbMRszVnKlAhXMZcWiqgF72S7f/QuMXi1oHk3C6:13JA0Ncxcq/kSXMmW2wS7IrHrYj

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f5e442e6945d30c986049140f9e2b930.exe

    • Size

      128KB

    • MD5

      f5e442e6945d30c986049140f9e2b930

    • SHA1

      6344adebe235c26459d268f2e86eb31b81abb1ea

    • SHA256

      aa666491dabec0d29280b85c58592bd90fb18e0e0b606a4e6e8a4c0263aa9dea

    • SHA512

      3822350ad9619c3ab517d6dbea38d63c7e984960ca218f576676430694700f7422b454b44fb5efec05746c199d7bacfdeb37f42bb543ff7ee6933a02a2d99d0d

    • SSDEEP

      1536:yR0caUAJAs/N3SddfFFxlcq5JzbMRszVnKlAhXMZcWiqgF72S7f/QuMXi1oHk3C6:13JA0Ncxcq/kSXMmW2wS7IrHrYj

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks