Overview

overview

10

Static

static

10

NEAS.d101e...00.exe

windows7-x64

10

NEAS.d101e...00.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d101e8dc61f3f1f89d9265027b9e6c00.exe

  • Size

    89KB

  • Sample

    231117-ffsayafb96

  • MD5

    d101e8dc61f3f1f89d9265027b9e6c00

  • SHA1

    acc67efb979d3eea987fca9f4d5b3bd410100ab7

  • SHA256

    eb5778a860d43d39dadda57678a6eb121a2a856de4cba957b59c797d5b022311

  • SHA512

    609959b3d6e03d554e86f10d7b7ce2ae204c24578a74634fb4f35772827e6da1e04d32f66e3882d10e2f68b6fe2b9a37685d817dfe9a0f58e04978d416e4aa88

  • SSDEEP

    1536:LLgvlJcMVC6fzWW05uzFq8HCwlJ2M9K47oX6wzgOqIpYcwZlExkg8Fk:ulJsaaW08zIkCI2mKUoXOdcWlakgwk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d101e8dc61f3f1f89d9265027b9e6c00.exe

    • Size

      89KB

    • MD5

      d101e8dc61f3f1f89d9265027b9e6c00

    • SHA1

      acc67efb979d3eea987fca9f4d5b3bd410100ab7

    • SHA256

      eb5778a860d43d39dadda57678a6eb121a2a856de4cba957b59c797d5b022311

    • SHA512

      609959b3d6e03d554e86f10d7b7ce2ae204c24578a74634fb4f35772827e6da1e04d32f66e3882d10e2f68b6fe2b9a37685d817dfe9a0f58e04978d416e4aa88

    • SSDEEP

      1536:LLgvlJcMVC6fzWW05uzFq8HCwlJ2M9K47oX6wzgOqIpYcwZlExkg8Fk:ulJsaaW08zIkCI2mKUoXOdcWlakgwk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks