Overview

overview

10

Static

static

10

NEAS.e3f62...JC.exe

windows7-x64

10

NEAS.e3f62...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e3f62c7b4721365b02ea7f94de4e6130_JC.exe

  • Size

    486KB

  • Sample

    231023-xzjxcafa87

  • MD5

    e3f62c7b4721365b02ea7f94de4e6130

  • SHA1

    b3f77cc759c745d86a4f623a887eb48f27e21b1f

  • SHA256

    c8695ff8e0c4a7b2dd45237ffd6e553ef2ec146a0228efec093b1b515f053f99

  • SHA512

    7dbc385934aef72725feb0eb97c5035cdee19463cfd721781a677f9ea87b4f59ea314e129e11c7f76f9a6956ebabb17b8e32108b7d3c0ee40de669afbd8b7fcc

  • SSDEEP

    12288:DlvI68FHRFbe5qfF8Kfq30TXQYDy3i5/L5r0GBH1eW6:DVIJBRYqfF8Kfq30TXQYDy3i5/L5r0Ge

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e3f62c7b4721365b02ea7f94de4e6130_JC.exe

    • Size

      486KB

    • MD5

      e3f62c7b4721365b02ea7f94de4e6130

    • SHA1

      b3f77cc759c745d86a4f623a887eb48f27e21b1f

    • SHA256

      c8695ff8e0c4a7b2dd45237ffd6e553ef2ec146a0228efec093b1b515f053f99

    • SHA512

      7dbc385934aef72725feb0eb97c5035cdee19463cfd721781a677f9ea87b4f59ea314e129e11c7f76f9a6956ebabb17b8e32108b7d3c0ee40de669afbd8b7fcc

    • SSDEEP

      12288:DlvI68FHRFbe5qfF8Kfq30TXQYDy3i5/L5r0GBH1eW6:DVIJBRYqfF8Kfq30TXQYDy3i5/L5r0Ge

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks