Overview

overview

10

Static

static

10

NEAS.20d54...3c.exe

windows7-x64

10

NEAS.20d54...3c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.20d54394a3d604709f18567ffea2de3c.exe

  • Size

    302KB

  • Sample

    231116-wkbfzsed47

  • MD5

    20d54394a3d604709f18567ffea2de3c

  • SHA1

    0d14b21888d5800a0fb27a2904b7c9fc6b08634b

  • SHA256

    284f6ab2fbd3a1db9b2c32ed7842d6210748486ef6e0fd5c2425981fc2988d91

  • SHA512

    73ef51d560e5165c72a9eeb39c397825223d1c8d44229824c2d18eaec30033f76b92c0ef176ef5af28a2d00950f89ea17205020cb8e0d68352c3d9f7882f6c50

  • SSDEEP

    6144:/gqb13bM2VVVHbVL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:Jb13hVVVxv8lXhuT9XvEhdfEmwlY1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.20d54394a3d604709f18567ffea2de3c.exe

    • Size

      302KB

    • MD5

      20d54394a3d604709f18567ffea2de3c

    • SHA1

      0d14b21888d5800a0fb27a2904b7c9fc6b08634b

    • SHA256

      284f6ab2fbd3a1db9b2c32ed7842d6210748486ef6e0fd5c2425981fc2988d91

    • SHA512

      73ef51d560e5165c72a9eeb39c397825223d1c8d44229824c2d18eaec30033f76b92c0ef176ef5af28a2d00950f89ea17205020cb8e0d68352c3d9f7882f6c50

    • SSDEEP

      6144:/gqb13bM2VVVHbVL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:Jb13hVVVxv8lXhuT9XvEhdfEmwlY1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks