Overview

overview

10

Static

static

10

NEAS.da7b7...JC.exe

windows7-x64

10

NEAS.da7b7...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.da7b79165f4fdaa6b9541554c714e588_JC.exe

  • Size

    256KB

  • Sample

    231022-savv4ahh8t

  • MD5

    da7b79165f4fdaa6b9541554c714e588

  • SHA1

    703c5b3816374c8176b9f677275433c8a4d597f2

  • SHA256

    4c5e3e3f45e32cf5979f9847fd0957f320b6c12d461621df37e9375b8f8471c5

  • SHA512

    2120c679d6d104a12839a17e9db3c21d14eb446d817d9ac54b1c05ffe1aa7b587d5ca6f31d600c76526b257e3751adbea92e9a58ee3a8a2b8acf103c7a83ca67

  • SSDEEP

    6144:bVaOwpaq13ipF3V6D4rQD85k/hQO+zrWnAdqjeOpKfduBU:bV2pirQg5W/+zrWAI5KFuU

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.da7b79165f4fdaa6b9541554c714e588_JC.exe

    • Size

      256KB

    • MD5

      da7b79165f4fdaa6b9541554c714e588

    • SHA1

      703c5b3816374c8176b9f677275433c8a4d597f2

    • SHA256

      4c5e3e3f45e32cf5979f9847fd0957f320b6c12d461621df37e9375b8f8471c5

    • SHA512

      2120c679d6d104a12839a17e9db3c21d14eb446d817d9ac54b1c05ffe1aa7b587d5ca6f31d600c76526b257e3751adbea92e9a58ee3a8a2b8acf103c7a83ca67

    • SSDEEP

      6144:bVaOwpaq13ipF3V6D4rQD85k/hQO+zrWnAdqjeOpKfduBU:bV2pirQg5W/+zrWAI5KFuU

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks