Overview

overview

10

Static

static

10

NEAS.d37f5...JC.exe

windows7-x64

10

NEAS.d37f5...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d37f59b455e41ec10d7db8006a139a52_JC.exe

  • Size

    121KB

  • Sample

    231022-r68amahh3t

  • MD5

    d37f59b455e41ec10d7db8006a139a52

  • SHA1

    c604dd6d1dc3f9856b802b181801af406a2a5eb7

  • SHA256

    fdd5c995e653ab6903554503fcf4fa7663cbe16661098c97a3a7a5ffceb43844

  • SHA512

    66a4f2b8bda0a349809818525376c11059e645f91ac324a3fddb367bf08e3b06a9bc7cd055c72f5f9bd4b13118cfabc4f0c2507f0d0ba91a44451d2435805ca1

  • SSDEEP

    3072:DRKpW+/Yed7oxxb4dfieEAWO7AJnD5tvv:DaL/bBaq9EAWOarvv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d37f59b455e41ec10d7db8006a139a52_JC.exe

    • Size

      121KB

    • MD5

      d37f59b455e41ec10d7db8006a139a52

    • SHA1

      c604dd6d1dc3f9856b802b181801af406a2a5eb7

    • SHA256

      fdd5c995e653ab6903554503fcf4fa7663cbe16661098c97a3a7a5ffceb43844

    • SHA512

      66a4f2b8bda0a349809818525376c11059e645f91ac324a3fddb367bf08e3b06a9bc7cd055c72f5f9bd4b13118cfabc4f0c2507f0d0ba91a44451d2435805ca1

    • SSDEEP

      3072:DRKpW+/Yed7oxxb4dfieEAWO7AJnD5tvv:DaL/bBaq9EAWOarvv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks