Overview

overview

10

Static

static

10

NEAS.f3b2d...62.exe

windows7-x64

10

NEAS.f3b2d...62.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.f3b2dab256f8e6b3a30117ac4ca59562.exe

  • Size

    109KB

  • Sample

    231117-vmrejsce8s

  • MD5

    f3b2dab256f8e6b3a30117ac4ca59562

  • SHA1

    e3c1080297f11d2f5c2478c92950f5602141c492

  • SHA256

    6f18c2f9b89faf0e2dc46e6eb0365a8a763cc9a7b07738ccb5f441bb98c2c0de

  • SHA512

    59973d025c54cad9c229b2ee7233cf57f89fd7eff2f7a74f37f0ebd9bce7ac34e36db779daabab2eb13584eee7af910d76872e213c6b5f7c1a97dcefe822b6b5

  • SSDEEP

    3072:hODWDKnIl8G8TMhC3v2J9RLCqwzBu1DjHLMVDqqkSpR:0DWDKnSmaC3+J95wtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f3b2dab256f8e6b3a30117ac4ca59562.exe

    • Size

      109KB

    • MD5

      f3b2dab256f8e6b3a30117ac4ca59562

    • SHA1

      e3c1080297f11d2f5c2478c92950f5602141c492

    • SHA256

      6f18c2f9b89faf0e2dc46e6eb0365a8a763cc9a7b07738ccb5f441bb98c2c0de

    • SHA512

      59973d025c54cad9c229b2ee7233cf57f89fd7eff2f7a74f37f0ebd9bce7ac34e36db779daabab2eb13584eee7af910d76872e213c6b5f7c1a97dcefe822b6b5

    • SSDEEP

      3072:hODWDKnIl8G8TMhC3v2J9RLCqwzBu1DjHLMVDqqkSpR:0DWDKnSmaC3+J95wtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks