Overview

overview

10

Static

static

10

NEAS.f40ed...20.exe

windows7-x64

10

NEAS.f40ed...20.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f40edff5aa6834f9c7964608e3adcf20.exe

  • Size

    169KB

  • Sample

    231117-z2gacafc61

  • MD5

    f40edff5aa6834f9c7964608e3adcf20

  • SHA1

    eb4c9cab3119abbd434e60d1d4edaed5cc205bfc

  • SHA256

    7301efce1b35a94b65a07970a967bfc607012b72801a12ac31dc3ef0dffa56be

  • SHA512

    cb24b9e64c4fa14a9f194dfc195dc5644665bdd2accdc91e80f4634a551840870587f6461b683a48f20250cc19c7e6c5f244c6d1f6e90b0ef0e812b522da922a

  • SSDEEP

    3072:qd89vQ6HAMRoa0U2PxMeEvPOdgujv6NLPfFFrKP92f65Ha:q+vhgJ5JML3OdgawrFZKPf9

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f40edff5aa6834f9c7964608e3adcf20.exe

    • Size

      169KB

    • MD5

      f40edff5aa6834f9c7964608e3adcf20

    • SHA1

      eb4c9cab3119abbd434e60d1d4edaed5cc205bfc

    • SHA256

      7301efce1b35a94b65a07970a967bfc607012b72801a12ac31dc3ef0dffa56be

    • SHA512

      cb24b9e64c4fa14a9f194dfc195dc5644665bdd2accdc91e80f4634a551840870587f6461b683a48f20250cc19c7e6c5f244c6d1f6e90b0ef0e812b522da922a

    • SSDEEP

      3072:qd89vQ6HAMRoa0U2PxMeEvPOdgujv6NLPfFFrKP92f65Ha:q+vhgJ5JML3OdgawrFZKPf9

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks