Overview

overview

10

Static

static

10

NEAS.00054...19.exe

windows7-x64

10

NEAS.00054...19.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.00054cbe84a905ad5e6711b76da67919.exe

  • Size

    113KB

  • Sample

    231117-v1chjsbg34

  • MD5

    00054cbe84a905ad5e6711b76da67919

  • SHA1

    6ea1b114bf1395cd18618f150fa5b6a2f1a26b8e

  • SHA256

    88690b5170ff3ee0cfc7acd8ad7f6e311884d119b1f45b4493699d0ce06a3dac

  • SHA512

    d8ae844b84d2243bdae9b8ee21fa6d11117f68374e6f1d288d71ec977d050568e17d0f0ded718ae6b84fb85fdb5dbd18192f28b6f4f3c182880f52548b2c0a6e

  • SSDEEP

    3072:pElONfBA/sI3onugCe8uvQa7gRj9/S2Kn:pElONfS3onISMRNF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.00054cbe84a905ad5e6711b76da67919.exe

    • Size

      113KB

    • MD5

      00054cbe84a905ad5e6711b76da67919

    • SHA1

      6ea1b114bf1395cd18618f150fa5b6a2f1a26b8e

    • SHA256

      88690b5170ff3ee0cfc7acd8ad7f6e311884d119b1f45b4493699d0ce06a3dac

    • SHA512

      d8ae844b84d2243bdae9b8ee21fa6d11117f68374e6f1d288d71ec977d050568e17d0f0ded718ae6b84fb85fdb5dbd18192f28b6f4f3c182880f52548b2c0a6e

    • SSDEEP

      3072:pElONfBA/sI3onugCe8uvQa7gRj9/S2Kn:pElONfS3onISMRNF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks