Overview

overview

10

Static

static

10

NEAS.83f09...JC.exe

windows7-x64

10

NEAS.83f09...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.83f099a95a5c72bb7ad952a5302bfd91_JC.exe

  • Size

    82KB

  • Sample

    231023-vz3ncabd41

  • MD5

    83f099a95a5c72bb7ad952a5302bfd91

  • SHA1

    aba10174ae3083582a9ec3dfebe73fddf0ec7077

  • SHA256

    396a24cea46c9ca27aae8535ec06121a02bb6e5f9905518ff7ba0880cde85887

  • SHA512

    8feb14ab2b4f948173da25570411b5550dd01a32e0090593da63ffb4e4da1b8019c18b161160828e8f660e2b29c825168317332b786ae1d683d35ca907dec491

  • SSDEEP

    1536:1exlk0eJ/QdOA+hXtjBhcm2L76pm6+wDSmQFN6TiN1sJtvQu:IXnJdOrhXtf+upm6tm7N6TO1SpD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.83f099a95a5c72bb7ad952a5302bfd91_JC.exe

    • Size

      82KB

    • MD5

      83f099a95a5c72bb7ad952a5302bfd91

    • SHA1

      aba10174ae3083582a9ec3dfebe73fddf0ec7077

    • SHA256

      396a24cea46c9ca27aae8535ec06121a02bb6e5f9905518ff7ba0880cde85887

    • SHA512

      8feb14ab2b4f948173da25570411b5550dd01a32e0090593da63ffb4e4da1b8019c18b161160828e8f660e2b29c825168317332b786ae1d683d35ca907dec491

    • SSDEEP

      1536:1exlk0eJ/QdOA+hXtjBhcm2L76pm6+wDSmQFN6TiN1sJtvQu:IXnJdOrhXtf+upm6tm7N6TO1SpD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks