Overview

overview

10

Static

static

10

NEAS.1519a...30.exe

windows7-x64

10

NEAS.1519a...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.1519af86e5b111cbd34bb0e2ed5ed530.exe

  • Size

    298KB

  • Sample

    231117-dqq5hseb72

  • MD5

    1519af86e5b111cbd34bb0e2ed5ed530

  • SHA1

    5107ba475b2cd92fa0b0c54d166df8d4a0552a78

  • SHA256

    cdead987e84079dc0aba56c83671520057144b8d6fd23d34e50167a161a3d247

  • SHA512

    8e26ba6105864eb08ea1b0b72d3bd84688c89e5aa4f2ccf32ff08ec942e8c9fb0ab425bd1abc5d7fac4fd427c2aee34b4656309d1930765a331adda1245117ad

  • SSDEEP

    6144:KwcaZ6//spGQXnTYaT15f7o+STYaT15fJJj+ke6abT:+B/ynTYapJoTYapxake6e

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.1519af86e5b111cbd34bb0e2ed5ed530.exe

    • Size

      298KB

    • MD5

      1519af86e5b111cbd34bb0e2ed5ed530

    • SHA1

      5107ba475b2cd92fa0b0c54d166df8d4a0552a78

    • SHA256

      cdead987e84079dc0aba56c83671520057144b8d6fd23d34e50167a161a3d247

    • SHA512

      8e26ba6105864eb08ea1b0b72d3bd84688c89e5aa4f2ccf32ff08ec942e8c9fb0ab425bd1abc5d7fac4fd427c2aee34b4656309d1930765a331adda1245117ad

    • SSDEEP

      6144:KwcaZ6//spGQXnTYaT15f7o+STYaT15fJJj+ke6abT:+B/ynTYapJoTYapxake6e

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks