Overview

overview

10

Static

static

10

NEAS.be044...30.exe

windows7-x64

10

NEAS.be044...30.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.be0447b97f73e4969779a908dc14dd30.exe

  • Size

    270KB

  • Sample

    231117-zf2zxsdh54

  • MD5

    be0447b97f73e4969779a908dc14dd30

  • SHA1

    a85af033952d7760089309940b04321850486e13

  • SHA256

    867c48cbb0eb06d469326900b785e88604a445517efabb8add74d1ccad719b6a

  • SHA512

    95ec5d642dc63b65939c5b682914b8b5c321456db31c56fae8afd048f21d3ee4eec35aa5143e6b714e89742c522ef2095e0047502b3cb643ba5ec8622ddbf9fc

  • SSDEEP

    6144:6SbVtetxo6hRNjpck4MetpS+f2uXLO+AGb+oPri2O3py69mNoRqzO5MnNYx:PYw6hb2XtpD2ub7A2Vri730697qy5oNK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.be0447b97f73e4969779a908dc14dd30.exe

    • Size

      270KB

    • MD5

      be0447b97f73e4969779a908dc14dd30

    • SHA1

      a85af033952d7760089309940b04321850486e13

    • SHA256

      867c48cbb0eb06d469326900b785e88604a445517efabb8add74d1ccad719b6a

    • SHA512

      95ec5d642dc63b65939c5b682914b8b5c321456db31c56fae8afd048f21d3ee4eec35aa5143e6b714e89742c522ef2095e0047502b3cb643ba5ec8622ddbf9fc

    • SSDEEP

      6144:6SbVtetxo6hRNjpck4MetpS+f2uXLO+AGb+oPri2O3py69mNoRqzO5MnNYx:PYw6hb2XtpD2ub7A2Vri730697qy5oNK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks