Overview

overview

10

Static

static

10

NEAS.f269e...JC.exe

windows7-x64

10

NEAS.f269e...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f269ec2011cbe573f43489443b901b56_JC.exe

  • Size

    669KB

  • Sample

    231023-x156zafb63

  • MD5

    f269ec2011cbe573f43489443b901b56

  • SHA1

    48905e2ebecc647ac02a0891859a0e718b4b6079

  • SHA256

    d43bbc0f05d0c32f695dfd043658623a162c5dce4a4c3998be23b3a127030e46

  • SHA512

    fba11254b11c8ca75f57e40792422f6c262f917bf9150723190da8c9c5011fd31513450ff288c44f8d76acc2fa905d2f6c3d855b481e4e6d3ce10aead8d44dfd

  • SSDEEP

    12288:dYteVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:mMp6p5vihMpQnqrdX72LbY6x46uR/qYs

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f269ec2011cbe573f43489443b901b56_JC.exe

    • Size

      669KB

    • MD5

      f269ec2011cbe573f43489443b901b56

    • SHA1

      48905e2ebecc647ac02a0891859a0e718b4b6079

    • SHA256

      d43bbc0f05d0c32f695dfd043658623a162c5dce4a4c3998be23b3a127030e46

    • SHA512

      fba11254b11c8ca75f57e40792422f6c262f917bf9150723190da8c9c5011fd31513450ff288c44f8d76acc2fa905d2f6c3d855b481e4e6d3ce10aead8d44dfd

    • SSDEEP

      12288:dYteVoo8ukpeeV24ihMpQnqr+cI3a72LXrY6x46UbR/qYglMi:mMp6p5vihMpQnqrdX72LbY6x46uR/qYs

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks