Overview

overview

10

Static

static

10

NEAS.cd5ac...JC.exe

windows7-x64

10

NEAS.cd5ac...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cd5ac79b24c575d431ee96840987398e_JC.exe

  • Size

    177KB

  • Sample

    231021-xvr26aag34

  • MD5

    cd5ac79b24c575d431ee96840987398e

  • SHA1

    e8ba2edd6df8e572d524ba8e28090af59e3e8173

  • SHA256

    93956dceae9d30f31e0a4a9920dc6d71e20e6bf61dd0f5f2fdf68bb1b75471a2

  • SHA512

    57561f77fd7a218bbba1756d3e18adaecf715fd5db746ba895034775c4c2b87facc81a428fa9bd15b178b3e0c24475eda27014e2cf7a3176d21212b1a4ba81d0

  • SSDEEP

    3072:1zBXQ4/OX2GtMTi9BV5txdh1ZNRKOirCg3q/haR5sS+vfvLHhjh8g1eGFyOsa:1xFOXTSTi9BV5txdh1ZNRKOirCga/haa

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cd5ac79b24c575d431ee96840987398e_JC.exe

    • Size

      177KB

    • MD5

      cd5ac79b24c575d431ee96840987398e

    • SHA1

      e8ba2edd6df8e572d524ba8e28090af59e3e8173

    • SHA256

      93956dceae9d30f31e0a4a9920dc6d71e20e6bf61dd0f5f2fdf68bb1b75471a2

    • SHA512

      57561f77fd7a218bbba1756d3e18adaecf715fd5db746ba895034775c4c2b87facc81a428fa9bd15b178b3e0c24475eda27014e2cf7a3176d21212b1a4ba81d0

    • SSDEEP

      3072:1zBXQ4/OX2GtMTi9BV5txdh1ZNRKOirCg3q/haR5sS+vfvLHhjh8g1eGFyOsa:1xFOXTSTi9BV5txdh1ZNRKOirCga/haa

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks