Overview

overview

10

Static

static

10

NEAS.4aabb...80.exe

windows7-x64

10

NEAS.4aabb...80.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4aabbafc3a34b09f1b6c1b601e562180.exe

  • Size

    76KB

  • Sample

    231117-aq5fcsdc71

  • MD5

    4aabbafc3a34b09f1b6c1b601e562180

  • SHA1

    f4e84cdd379b391d58113d4c9224bc1b8eab6c56

  • SHA256

    837a5d5f7214c7ec1999d5d35e66a547baed3c92a48ea7fa2fbbe9479aee8064

  • SHA512

    2e0614105c8c344b3c90701d7008d36b97193c204fb42a275770dbf79daef6e2dbd36b92c13b4155134869ccf33a3151d6b9fc039cd2f2f17525cb302a904658

  • SSDEEP

    1536:LEebbo8UdetNLxcqSNd6/HioQV+/eCeyvCQ:Yebb1vtNLxcqSW/Hrk+

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4aabbafc3a34b09f1b6c1b601e562180.exe

    • Size

      76KB

    • MD5

      4aabbafc3a34b09f1b6c1b601e562180

    • SHA1

      f4e84cdd379b391d58113d4c9224bc1b8eab6c56

    • SHA256

      837a5d5f7214c7ec1999d5d35e66a547baed3c92a48ea7fa2fbbe9479aee8064

    • SHA512

      2e0614105c8c344b3c90701d7008d36b97193c204fb42a275770dbf79daef6e2dbd36b92c13b4155134869ccf33a3151d6b9fc039cd2f2f17525cb302a904658

    • SSDEEP

      1536:LEebbo8UdetNLxcqSNd6/HioQV+/eCeyvCQ:Yebb1vtNLxcqSW/Hrk+

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks