Overview

overview

10

Static

static

10

NEAS.a5bdf...70.exe

windows7-x64

10

NEAS.a5bdf...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a5bdf22f149a09286fdcffe1a60e7c70.exe

  • Size

    153KB

  • Sample

    231116-nt2qjacf9v

  • MD5

    a5bdf22f149a09286fdcffe1a60e7c70

  • SHA1

    4e25effa0ebbfe70e138f440785a7cf57fbc78f7

  • SHA256

    5733a4a2a2a44ead88b6d75b3e68ebf718135c5c045901f73262ae3be410c209

  • SHA512

    13894b7f60ee74c45b5a922140ba8d38f3bcf03766bb35c76839d8656d18350d314fd07142994da32c23158788bb690fd187ef50e067fc90b9cbb6260af47206

  • SSDEEP

    3072:IK/KgTBeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:J/KgTBdAHj05xP3DZyN1eRppzcexn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a5bdf22f149a09286fdcffe1a60e7c70.exe

    • Size

      153KB

    • MD5

      a5bdf22f149a09286fdcffe1a60e7c70

    • SHA1

      4e25effa0ebbfe70e138f440785a7cf57fbc78f7

    • SHA256

      5733a4a2a2a44ead88b6d75b3e68ebf718135c5c045901f73262ae3be410c209

    • SHA512

      13894b7f60ee74c45b5a922140ba8d38f3bcf03766bb35c76839d8656d18350d314fd07142994da32c23158788bb690fd187ef50e067fc90b9cbb6260af47206

    • SSDEEP

      3072:IK/KgTBeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:J/KgTBdAHj05xP3DZyN1eRppzcexn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks