Overview

overview

10

Static

static

10

NEAS.06214...20.exe

windows7-x64

10

NEAS.06214...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.06214149c32c02fe7e2dc30d18d24f20.exe

  • Size

    367KB

  • Sample

    231117-xe5y3sdh3s

  • MD5

    06214149c32c02fe7e2dc30d18d24f20

  • SHA1

    e4480032c3235a7930106701d617a1232778754e

  • SHA256

    3d0fa00a0a8c913800b32c78b8801b6e442a26bdab0d819661adc827be5f2ef1

  • SHA512

    7333577d1a394c75b07b415be864e873748e8c78bc0f1c92dc1e4e97457d32e34efc8fb59f598c6ea7fc1c7c188b0b17c2ebedeeadcb152bb38ed60074e1e647

  • SSDEEP

    6144:oA7IvQtQS8rdtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:ozQgtJCXqP77D7FB24lwR45FB24lqM

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.06214149c32c02fe7e2dc30d18d24f20.exe

    • Size

      367KB

    • MD5

      06214149c32c02fe7e2dc30d18d24f20

    • SHA1

      e4480032c3235a7930106701d617a1232778754e

    • SHA256

      3d0fa00a0a8c913800b32c78b8801b6e442a26bdab0d819661adc827be5f2ef1

    • SHA512

      7333577d1a394c75b07b415be864e873748e8c78bc0f1c92dc1e4e97457d32e34efc8fb59f598c6ea7fc1c7c188b0b17c2ebedeeadcb152bb38ed60074e1e647

    • SSDEEP

      6144:oA7IvQtQS8rdtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:ozQgtJCXqP77D7FB24lwR45FB24lqM

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks