Overview

overview

10

Static

static

10

NEAS.a1e54...70.exe

windows7-x64

10

NEAS.a1e54...70.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a1e549d5753d2170b8ddcd68d0c80b70.exe

  • Size

    106KB

  • Sample

    231117-17zjjsga7w

  • MD5

    a1e549d5753d2170b8ddcd68d0c80b70

  • SHA1

    e4852972dc9d3eeee36de41535fd5020a143b066

  • SHA256

    f4975f2d62c7ff4d4f7add02990daae769b54d315e0a139c0e893aecf6346bd0

  • SHA512

    9c89a501167e4ec40c09389185c3bc53d823352a34038054c8a8ac5304426fdbff904b9741d7b7a61809b911a7b6ee45be99f58043d24990dfd1399b6c25a4bc

  • SSDEEP

    3072:MhdHNTVpvUib4erXQ1WdTCn93OGey/ZhC:MaMrXPTCndOGeKY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a1e549d5753d2170b8ddcd68d0c80b70.exe

    • Size

      106KB

    • MD5

      a1e549d5753d2170b8ddcd68d0c80b70

    • SHA1

      e4852972dc9d3eeee36de41535fd5020a143b066

    • SHA256

      f4975f2d62c7ff4d4f7add02990daae769b54d315e0a139c0e893aecf6346bd0

    • SHA512

      9c89a501167e4ec40c09389185c3bc53d823352a34038054c8a8ac5304426fdbff904b9741d7b7a61809b911a7b6ee45be99f58043d24990dfd1399b6c25a4bc

    • SSDEEP

      3072:MhdHNTVpvUib4erXQ1WdTCn93OGey/ZhC:MaMrXPTCndOGeKY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks