Overview

overview

10

Static

static

10

NEAS.d2d98...JC.exe

windows7-x64

10

NEAS.d2d98...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d2d98ac02fe8148f4e1c7e2d3d8cf9c0_JC.exe

  • Size

    109KB

  • Sample

    231023-wbtwzade56

  • MD5

    d2d98ac02fe8148f4e1c7e2d3d8cf9c0

  • SHA1

    aa73493acf2b17ab370d1dc6a780b94eac6afa1d

  • SHA256

    190c31206b5ff9122c348c81888f3bb6f2e57b45feb12f8897f439cc30dd5bae

  • SHA512

    67563fbb39d2e4c91f4d3f95beeac1ba8c85a5a19871155c6fcb95e582a0b59b3f5c84fb6901e94ada950fcdbcd78adf7d357b3e85ed6cc8d83783491d65fdee

  • SSDEEP

    3072:KYZYWE8E9iYenE8fo3PXl9Z7S/yCsKh2EzZA/z:zZYXfiYenEgo35e/yCthvUz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d2d98ac02fe8148f4e1c7e2d3d8cf9c0_JC.exe

    • Size

      109KB

    • MD5

      d2d98ac02fe8148f4e1c7e2d3d8cf9c0

    • SHA1

      aa73493acf2b17ab370d1dc6a780b94eac6afa1d

    • SHA256

      190c31206b5ff9122c348c81888f3bb6f2e57b45feb12f8897f439cc30dd5bae

    • SHA512

      67563fbb39d2e4c91f4d3f95beeac1ba8c85a5a19871155c6fcb95e582a0b59b3f5c84fb6901e94ada950fcdbcd78adf7d357b3e85ed6cc8d83783491d65fdee

    • SSDEEP

      3072:KYZYWE8E9iYenE8fo3PXl9Z7S/yCsKh2EzZA/z:zZYXfiYenEgo35e/yCthvUz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks