Overview

overview

10

Static

static

10

NEAS.af80f...90.exe

windows7-x64

10

NEAS.af80f...90.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.af80f77d677342e5673cbd3f357d0890.exe

  • Size

    112KB

  • Sample

    231117-b19cqsch99

  • MD5

    af80f77d677342e5673cbd3f357d0890

  • SHA1

    fbe3f004d040d62e7ce8e45490c0d6f8b1071a93

  • SHA256

    1a2e0b00357c90e3303acdb0128f5d357032a2c3549d76314cd0afab72c7eb7a

  • SHA512

    cb586cd5e28a2ba002764b0af9922130442ecae603717548a9ca88f89d753dad39a6a1128d47387a5c623510877b322363a968abdda58d4abcec4419537c137a

  • SSDEEP

    3072:9EUiIEhW7KcDq4PpXZlQ4HPMQH2qC7ZQOlzSLUK6MwGsGnDc9o:9Spk7XGWpXJHPMQWfdQOhwJ6MwGsw

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.af80f77d677342e5673cbd3f357d0890.exe

    • Size

      112KB

    • MD5

      af80f77d677342e5673cbd3f357d0890

    • SHA1

      fbe3f004d040d62e7ce8e45490c0d6f8b1071a93

    • SHA256

      1a2e0b00357c90e3303acdb0128f5d357032a2c3549d76314cd0afab72c7eb7a

    • SHA512

      cb586cd5e28a2ba002764b0af9922130442ecae603717548a9ca88f89d753dad39a6a1128d47387a5c623510877b322363a968abdda58d4abcec4419537c137a

    • SSDEEP

      3072:9EUiIEhW7KcDq4PpXZlQ4HPMQH2qC7ZQOlzSLUK6MwGsGnDc9o:9Spk7XGWpXJHPMQWfdQOhwJ6MwGsw

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks