Overview

overview

10

Static

static

10

NEAS.cd2dd...JC.exe

windows7-x64

10

NEAS.cd2dd...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cd2dda5c7bf53bc7e679c7c63b7135b1_JC.exe

  • Size

    422KB

  • Sample

    231022-r2ykmabf55

  • MD5

    cd2dda5c7bf53bc7e679c7c63b7135b1

  • SHA1

    9166e35e059b486b4892edd44464a13fef8d6c73

  • SHA256

    349de6001aca448d6f8495c6385d46ebf13a8e93e5a7e1c94b68726275e69137

  • SHA512

    bd6685bf6cb1260c058f0bfbfeae671574221056078909894af6b2a4361db14b2a0c3103cc9dc2e03b9bcf445364a292ef23ec8cdd7b85ff1a44335c080be047

  • SSDEEP

    6144:nQwHzMQWfdQOhwJ6MwGsmLrIdfIJGcP/1mWI/MwGsmLrZNs/VKi/MwGsmLrxHn84:QKIHFCsMmm4dOGcP/AdMmmpNs/VXMmmT

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cd2dda5c7bf53bc7e679c7c63b7135b1_JC.exe

    • Size

      422KB

    • MD5

      cd2dda5c7bf53bc7e679c7c63b7135b1

    • SHA1

      9166e35e059b486b4892edd44464a13fef8d6c73

    • SHA256

      349de6001aca448d6f8495c6385d46ebf13a8e93e5a7e1c94b68726275e69137

    • SHA512

      bd6685bf6cb1260c058f0bfbfeae671574221056078909894af6b2a4361db14b2a0c3103cc9dc2e03b9bcf445364a292ef23ec8cdd7b85ff1a44335c080be047

    • SSDEEP

      6144:nQwHzMQWfdQOhwJ6MwGsmLrIdfIJGcP/1mWI/MwGsmLrZNs/VKi/MwGsmLrxHn84:QKIHFCsMmm4dOGcP/AdMmmpNs/VXMmmT

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks