Overview

overview

10

Static

static

10

NEAS.b9698...70.exe

windows7-x64

10

NEAS.b9698...70.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.b9698c761ee6cae1725dbdd5e9702070.exe

  • Size

    143KB

  • Sample

    231118-hj4t9ace23

  • MD5

    b9698c761ee6cae1725dbdd5e9702070

  • SHA1

    8452bea67b5e88c4eb226bb931590f3fd1afca89

  • SHA256

    90f274dbccdf6391c92a55e47429ba4f69df833198d0bb5bfd9ca8d1de8113df

  • SHA512

    b0f63e8e0b6dc626a76df08142b40bf4013c58c1c2d7b1ed080b8fd8499559bb2905b34b12b464b9cf7f1952772058c307d621a4becd4bcbeaac7d573938aed5

  • SSDEEP

    1536:a3YqGdSqQRZg2aZinlrAqjs+9UQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:ws8nlz93N93bsGfhv0vt3y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b9698c761ee6cae1725dbdd5e9702070.exe

    • Size

      143KB

    • MD5

      b9698c761ee6cae1725dbdd5e9702070

    • SHA1

      8452bea67b5e88c4eb226bb931590f3fd1afca89

    • SHA256

      90f274dbccdf6391c92a55e47429ba4f69df833198d0bb5bfd9ca8d1de8113df

    • SHA512

      b0f63e8e0b6dc626a76df08142b40bf4013c58c1c2d7b1ed080b8fd8499559bb2905b34b12b464b9cf7f1952772058c307d621a4becd4bcbeaac7d573938aed5

    • SSDEEP

      1536:a3YqGdSqQRZg2aZinlrAqjs+9UQ5ziJE93isirBUBEVGBtVM2hZV03fca13y:ws8nlz93N93bsGfhv0vt3y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks