Overview

overview

10

Static

static

10

NEAS.e53f4...50.exe

windows7-x64

10

NEAS.e53f4...50.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.e53f42027b97e56221e380ca8932e950.exe

  • Size

    96KB

  • Sample

    231117-gl6aesgh51

  • MD5

    e53f42027b97e56221e380ca8932e950

  • SHA1

    9dc1d651bac1e99b108e4b011a53eb39f0e6c679

  • SHA256

    850dd08710cca2da301b8a3afa5dc6ac760f82e347c49fc5ffa43dcc7b68c809

  • SHA512

    ed506fd7dd47e18f01e2d64f5f6c13b4dc394959238107e1d7b0936ea639a4c16926934b84bcfae969c65b88a2d1f145e257924388274b659b564d2052f56a69

  • SSDEEP

    1536:aIkhJ4V0jAjQVlWA6qHMsVC9Dh8V4nVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhg:0hyoAjMWA7fw9DhO4nVqZ2fQkbn1vVAT

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e53f42027b97e56221e380ca8932e950.exe

    • Size

      96KB

    • MD5

      e53f42027b97e56221e380ca8932e950

    • SHA1

      9dc1d651bac1e99b108e4b011a53eb39f0e6c679

    • SHA256

      850dd08710cca2da301b8a3afa5dc6ac760f82e347c49fc5ffa43dcc7b68c809

    • SHA512

      ed506fd7dd47e18f01e2d64f5f6c13b4dc394959238107e1d7b0936ea639a4c16926934b84bcfae969c65b88a2d1f145e257924388274b659b564d2052f56a69

    • SSDEEP

      1536:aIkhJ4V0jAjQVlWA6qHMsVC9Dh8V4nVcdZ2JVQBKoC/CKniTCvVAva61hLDnePhg:0hyoAjMWA7fw9DhO4nVqZ2fQkbn1vVAT

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks