Overview

overview

10

Static

static

10

NEAS.a4e0b...60.exe

windows7-x64

10

NEAS.a4e0b...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a4e0b212e10a5f0ef3c411cdd2b8db60.exe

  • Size

    450KB

  • Sample

    231116-le15cahe79

  • MD5

    a4e0b212e10a5f0ef3c411cdd2b8db60

  • SHA1

    13c3d6b7cb86d0b47a1ee437be73c29a3f63a03d

  • SHA256

    f5f000bade0198fc7c24b0130acfbede211e588368745e6476caf9c31bab8655

  • SHA512

    6e5bc283447ce1f8612077e5a1e58ec3c235830277617dc625c3c73e6f1cbca2ee5561226d20cd1630fe85344e6377c7f9df52e202ac299dd92e17741a35ea64

  • SSDEEP

    12288:MYl7XFC9m7ufXFC9xfIkMuXFC9m7ufXFC9Wm:MYl7c9Iufc9xsuc9Iufc9Wm

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a4e0b212e10a5f0ef3c411cdd2b8db60.exe

    • Size

      450KB

    • MD5

      a4e0b212e10a5f0ef3c411cdd2b8db60

    • SHA1

      13c3d6b7cb86d0b47a1ee437be73c29a3f63a03d

    • SHA256

      f5f000bade0198fc7c24b0130acfbede211e588368745e6476caf9c31bab8655

    • SHA512

      6e5bc283447ce1f8612077e5a1e58ec3c235830277617dc625c3c73e6f1cbca2ee5561226d20cd1630fe85344e6377c7f9df52e202ac299dd92e17741a35ea64

    • SSDEEP

      12288:MYl7XFC9m7ufXFC9xfIkMuXFC9m7ufXFC9Wm:MYl7c9Iufc9xsuc9Iufc9Wm

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks