Overview

overview

10

Static

static

10

NEAS.deffb...2e.exe

windows7-x64

10

NEAS.deffb...2e.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.deffbf2af1498b3912b40dff39e0712e.exe

  • Size

    125KB

  • Sample

    231116-vvncvsdg35

  • MD5

    deffbf2af1498b3912b40dff39e0712e

  • SHA1

    29691ac6539695878067f1fd0692e809cd4e6723

  • SHA256

    1463460fc2c894d25cc1ed7f848fc38eab19b66308ad0d01342b9b0c296bb43f

  • SHA512

    e2d058ce59a9ed53a8fd8a81f52d409f19feaeca0fc5d72b2a85e14b811d4ca5c5d4206b8a688740237d7f8ec2d2d64bcf5e157bb1bfff193977fbf14f7cb97f

  • SSDEEP

    3072:Inh1cwI/VVpw8Co/dDijc91WdTCn93OGey/ZhJakrPF:IPcxmNo/dDijc+TCndOGeKTaG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.deffbf2af1498b3912b40dff39e0712e.exe

    • Size

      125KB

    • MD5

      deffbf2af1498b3912b40dff39e0712e

    • SHA1

      29691ac6539695878067f1fd0692e809cd4e6723

    • SHA256

      1463460fc2c894d25cc1ed7f848fc38eab19b66308ad0d01342b9b0c296bb43f

    • SHA512

      e2d058ce59a9ed53a8fd8a81f52d409f19feaeca0fc5d72b2a85e14b811d4ca5c5d4206b8a688740237d7f8ec2d2d64bcf5e157bb1bfff193977fbf14f7cb97f

    • SSDEEP

      3072:Inh1cwI/VVpw8Co/dDijc91WdTCn93OGey/ZhJakrPF:IPcxmNo/dDijc+TCndOGeKTaG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks