Overview

overview

10

Static

static

10

NEAS.43719...40.exe

windows7-x64

10

NEAS.43719...40.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.4371991e2d0eb0520e9ac21f7d191840.exe

  • Size

    125KB

  • Sample

    231118-cqvbhaad4z

  • MD5

    4371991e2d0eb0520e9ac21f7d191840

  • SHA1

    2021779bc9284d3673a980c87793f1b185a41ad7

  • SHA256

    bff4f96b3063ed735d653bd27a2372e35978d7efca796f3c9a1691f7a02effa4

  • SHA512

    a3e393767d571f436e7b081c0e041d3743b16b9399d3bfead92eda5dca92935fb62df1c77d717e20dfea661d70895c04881792a5185cd227de817d5467f68905

  • SSDEEP

    3072:JBByTkePNgpkbx3YmIQr+yabwdPZ9tWMi5WCpncd1WdTCn93OGey/ZhJakrPF:JBByTTbdRDlFvMl5ZceTCndOGeKTaG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4371991e2d0eb0520e9ac21f7d191840.exe

    • Size

      125KB

    • MD5

      4371991e2d0eb0520e9ac21f7d191840

    • SHA1

      2021779bc9284d3673a980c87793f1b185a41ad7

    • SHA256

      bff4f96b3063ed735d653bd27a2372e35978d7efca796f3c9a1691f7a02effa4

    • SHA512

      a3e393767d571f436e7b081c0e041d3743b16b9399d3bfead92eda5dca92935fb62df1c77d717e20dfea661d70895c04881792a5185cd227de817d5467f68905

    • SSDEEP

      3072:JBByTkePNgpkbx3YmIQr+yabwdPZ9tWMi5WCpncd1WdTCn93OGey/ZhJakrPF:JBByTTbdRDlFvMl5ZceTCndOGeKTaG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks