Overview

overview

10

Static

static

10

NEAS.d9d7b...JC.exe

windows7-x64

10

NEAS.d9d7b...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d9d7b3ab0021f21fa95dd0de808de676_JC.exe

  • Size

    161KB

  • Sample

    231023-w94h3aed57

  • MD5

    d9d7b3ab0021f21fa95dd0de808de676

  • SHA1

    3217eb273c56c6a6458cdaf86fb429045c2813d2

  • SHA256

    405fa112753e4d4c0417a7d878fe1fe989d6ede65e2df24a8fbe99930afaf43a

  • SHA512

    d53b01047c5d6d8ebf3a5179e1d97b9686001f71a4f49109d493bd820f46024ee99b215f79abd15ba3eab7a340416abfad3d3d59b683616c756a8e4b45ab58cb

  • SSDEEP

    3072:PTVO8Ss89KVzOh1KLE1AN5/kmVwtCJXeex7rrIRZK8K8/kv:PRLSsO0OhqE1WNkmVwtmeetrIyR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d9d7b3ab0021f21fa95dd0de808de676_JC.exe

    • Size

      161KB

    • MD5

      d9d7b3ab0021f21fa95dd0de808de676

    • SHA1

      3217eb273c56c6a6458cdaf86fb429045c2813d2

    • SHA256

      405fa112753e4d4c0417a7d878fe1fe989d6ede65e2df24a8fbe99930afaf43a

    • SHA512

      d53b01047c5d6d8ebf3a5179e1d97b9686001f71a4f49109d493bd820f46024ee99b215f79abd15ba3eab7a340416abfad3d3d59b683616c756a8e4b45ab58cb

    • SSDEEP

      3072:PTVO8Ss89KVzOh1KLE1AN5/kmVwtCJXeex7rrIRZK8K8/kv:PRLSsO0OhqE1WNkmVwtmeetrIyR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks