Overview

overview

10

Static

static

10

NEAS.bd93a...80.exe

windows7-x64

10

NEAS.bd93a...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.bd93acd0031fbf8b7ed1d8a118e01f80.exe

  • Size

    133KB

  • Sample

    231118-hptapsde9z

  • MD5

    bd93acd0031fbf8b7ed1d8a118e01f80

  • SHA1

    b1a1d2efb71b09d5189e38448f4588c85724c415

  • SHA256

    c4d275bc2cbf821fc112e4c93e78e645d7ab8a059c7e99877037389e22bdb3bc

  • SHA512

    62817e556797603f8326f041306f823511471917712be1a586adc529d288082a52467453b2a8f82b693471736f02048775e05f5a6c8ac8ca1cbcb9d581685982

  • SSDEEP

    3072:2tk1E0uuVb5WW5ETphlKG7UDd0pCrQIFdFtLwzTa:2a9uSDmphQG7Ux0ocIPF9wzG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bd93acd0031fbf8b7ed1d8a118e01f80.exe

    • Size

      133KB

    • MD5

      bd93acd0031fbf8b7ed1d8a118e01f80

    • SHA1

      b1a1d2efb71b09d5189e38448f4588c85724c415

    • SHA256

      c4d275bc2cbf821fc112e4c93e78e645d7ab8a059c7e99877037389e22bdb3bc

    • SHA512

      62817e556797603f8326f041306f823511471917712be1a586adc529d288082a52467453b2a8f82b693471736f02048775e05f5a6c8ac8ca1cbcb9d581685982

    • SSDEEP

      3072:2tk1E0uuVb5WW5ETphlKG7UDd0pCrQIFdFtLwzTa:2a9uSDmphQG7Ux0ocIPF9wzG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks