Overview

overview

10

Static

static

10

NEAS.a4114...30.exe

windows7-x64

10

NEAS.a4114...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.a41144a0d3b12ce9bd968f6612197930.exe

  • Size

    256KB

  • Sample

    231117-wvkgmscc94

  • MD5

    a41144a0d3b12ce9bd968f6612197930

  • SHA1

    4f084915f71838993ac8abe3876f47d1e2dd885c

  • SHA256

    807a3d0f25e37d33a884be234269f5d31d57e7e3f9f20a3aaf0e1dd2dea11c75

  • SHA512

    cf9504af2035bc67d2cee776eadc64f5623eb939f30ab3a58e797e76294294f097659dc26ed272bb81a3d745e8e5d851721588890a12279afeb2453ffbb50869

  • SSDEEP

    6144:tt+5inE4rQD85k/hQO+zrWnAdqjeOpKfduBU:rrQg5W/+zrWAI5KFuU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a41144a0d3b12ce9bd968f6612197930.exe

    • Size

      256KB

    • MD5

      a41144a0d3b12ce9bd968f6612197930

    • SHA1

      4f084915f71838993ac8abe3876f47d1e2dd885c

    • SHA256

      807a3d0f25e37d33a884be234269f5d31d57e7e3f9f20a3aaf0e1dd2dea11c75

    • SHA512

      cf9504af2035bc67d2cee776eadc64f5623eb939f30ab3a58e797e76294294f097659dc26ed272bb81a3d745e8e5d851721588890a12279afeb2453ffbb50869

    • SSDEEP

      6144:tt+5inE4rQD85k/hQO+zrWnAdqjeOpKfduBU:rrQg5W/+zrWAI5KFuU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks