Overview

overview

10

Static

static

10

NEAS.0ab23...50.exe

windows7-x64

10

NEAS.0ab23...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0ab231c668824513e97113bae8345450.exe

  • Size

    336KB

  • Sample

    231118-ahvk7aha4y

  • MD5

    0ab231c668824513e97113bae8345450

  • SHA1

    ccf25a7fb281f732b4d331bd528d1be6ab3cab6c

  • SHA256

    c4516ac22a99aeb0793b4c2e6c59d0f4fdee5044df605ec9cb748020da988285

  • SHA512

    4b797eabfed5997b89cbba0870731f844098a2a043cf3d57e59a32d95b247ef808ca9f410d37b54262a393f3c815aedb3e5bc376f12d5fb399bd1e298602baa2

  • SSDEEP

    6144:zmVaooFBsRyH7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOE:zmVa157aOlxzr3cOK3Taj

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0ab231c668824513e97113bae8345450.exe

    • Size

      336KB

    • MD5

      0ab231c668824513e97113bae8345450

    • SHA1

      ccf25a7fb281f732b4d331bd528d1be6ab3cab6c

    • SHA256

      c4516ac22a99aeb0793b4c2e6c59d0f4fdee5044df605ec9cb748020da988285

    • SHA512

      4b797eabfed5997b89cbba0870731f844098a2a043cf3d57e59a32d95b247ef808ca9f410d37b54262a393f3c815aedb3e5bc376f12d5fb399bd1e298602baa2

    • SSDEEP

      6144:zmVaooFBsRyH7aOl3BzrUmKyIxLfYeOO9UmKyIxLiajOE:zmVa157aOlxzr3cOK3Taj

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks