Overview

overview

10

Static

static

10

NEAS.aeced...50.exe

windows7-x64

10

NEAS.aeced...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.aeced95c57104fd1ea89e3c1f3913150.exe

  • Size

    256KB

  • Sample

    231118-f23zkabf76

  • MD5

    aeced95c57104fd1ea89e3c1f3913150

  • SHA1

    fec8870e9d7399b8754f5662db1d9b020ffe9cfa

  • SHA256

    3bddc85fcb86c2e0ed6a931ef02a6c2534a01db92b5c8d29fa51c1e7e4e48a74

  • SHA512

    1a6a9fa0823336cae572a2d20719742fd7e87b351cea5b982096104b7db25a63e7956f492683ebc070fc4b566c86e539dcededc92e3f872bae9d38ce71577fc8

  • SSDEEP

    6144:wJc1WAjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:Lg2lpJxifbWGRdA6sQhPbWGRdA6sQxU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.aeced95c57104fd1ea89e3c1f3913150.exe

    • Size

      256KB

    • MD5

      aeced95c57104fd1ea89e3c1f3913150

    • SHA1

      fec8870e9d7399b8754f5662db1d9b020ffe9cfa

    • SHA256

      3bddc85fcb86c2e0ed6a931ef02a6c2534a01db92b5c8d29fa51c1e7e4e48a74

    • SHA512

      1a6a9fa0823336cae572a2d20719742fd7e87b351cea5b982096104b7db25a63e7956f492683ebc070fc4b566c86e539dcededc92e3f872bae9d38ce71577fc8

    • SSDEEP

      6144:wJc1WAjlpmmxieQbWGRdA6sQc/Yp7TVX3J/1awbWGRdA6sQc/YRU:Lg2lpJxifbWGRdA6sQhPbWGRdA6sQxU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks