Overview

overview

10

Static

static

10

NEAS.b9d46...6e.exe

windows7-x64

10

NEAS.b9d46...6e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b9d46ec87b871249e17bd28582694b6e.exe

  • Size

    77KB

  • Sample

    231116-vbza1see4x

  • MD5

    b9d46ec87b871249e17bd28582694b6e

  • SHA1

    69602fe3ac0921b157eedfd44b7fe916e7ba663e

  • SHA256

    3b0f1f60b7a54cc130969c77a5e42fd69b75d919b6b182802388079739019ee9

  • SHA512

    ea61fdfd1ef4c10e3868074ed3008aae587b8677b0b18f2b2a19f7eed2f9733f63657aa3cfb7dd8e9c0ff024aa373797f4618d963983f187c1032cbc4dbc8fc8

  • SSDEEP

    1536:pwzqKh9w3LwPKkPQmv6N3OTeWFs+XF2Ltlwfi+TjRC/D:pyULwPR6N3O7FsD3wf1TjYD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b9d46ec87b871249e17bd28582694b6e.exe

    • Size

      77KB

    • MD5

      b9d46ec87b871249e17bd28582694b6e

    • SHA1

      69602fe3ac0921b157eedfd44b7fe916e7ba663e

    • SHA256

      3b0f1f60b7a54cc130969c77a5e42fd69b75d919b6b182802388079739019ee9

    • SHA512

      ea61fdfd1ef4c10e3868074ed3008aae587b8677b0b18f2b2a19f7eed2f9733f63657aa3cfb7dd8e9c0ff024aa373797f4618d963983f187c1032cbc4dbc8fc8

    • SSDEEP

      1536:pwzqKh9w3LwPKkPQmv6N3OTeWFs+XF2Ltlwfi+TjRC/D:pyULwPR6N3O7FsD3wf1TjYD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks