Overview

overview

10

Static

static

10

NEAS.17138...a0.exe

windows7-x64

10

NEAS.17138...a0.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.17138e631592797cae0a516bbbbb63a0.exe

  • Size

    128KB

  • Sample

    231117-vg4spabd63

  • MD5

    17138e631592797cae0a516bbbbb63a0

  • SHA1

    73c98200f0183d943b04ceb75f9f983f2f5b4f7c

  • SHA256

    6eda549c9a8b05d1bf2931b54d8dbcc83b04458980c0c89d2a5d3b7a68ef7ae5

  • SHA512

    69037797f688859189e9a01d74b2087a9a3142b765dbd112c20b280df45529fa0102576e00931a0e1b7fb5775fc6cbb9014af3c5da8ee952122ba151b8c9b4d1

  • SSDEEP

    1536:YgmQYmQmvQ8bo5Z3WnLJSi7npja0rLcjcXwc7iaKrt8umjam/2q2qzEhXbZcWiqU:YdpkEba14r2j9x2qaXbmW2wS7IrHrYj

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.17138e631592797cae0a516bbbbb63a0.exe

    • Size

      128KB

    • MD5

      17138e631592797cae0a516bbbbb63a0

    • SHA1

      73c98200f0183d943b04ceb75f9f983f2f5b4f7c

    • SHA256

      6eda549c9a8b05d1bf2931b54d8dbcc83b04458980c0c89d2a5d3b7a68ef7ae5

    • SHA512

      69037797f688859189e9a01d74b2087a9a3142b765dbd112c20b280df45529fa0102576e00931a0e1b7fb5775fc6cbb9014af3c5da8ee952122ba151b8c9b4d1

    • SSDEEP

      1536:YgmQYmQmvQ8bo5Z3WnLJSi7npja0rLcjcXwc7iaKrt8umjam/2q2qzEhXbZcWiqU:YdpkEba14r2j9x2qaXbmW2wS7IrHrYj

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks