Overview

overview

10

Static

static

10

NEAS.dfb24...JC.exe

windows7-x64

10

NEAS.dfb24...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dfb24ca7cba3cd50dc00949e4801ac40_JC.exe

  • Size

    391KB

  • Sample

    231023-yvm9msgb96

  • MD5

    dfb24ca7cba3cd50dc00949e4801ac40

  • SHA1

    07643f0e5eb0ea21c28670b4367ce55f083e0079

  • SHA256

    48162f18f287eec7be3316435769528c652ca35c6de3027f2175a4511b024de2

  • SHA512

    edc32e291dd289b3401393e5551d5c7021bc89c105005b544ee810e491fc8be84fe2881be974707d69b20b79ce25d0a7663387aba64ad21d7f353250de04b7d6

  • SSDEEP

    12288:6kL94Q+T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:dHS9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dfb24ca7cba3cd50dc00949e4801ac40_JC.exe

    • Size

      391KB

    • MD5

      dfb24ca7cba3cd50dc00949e4801ac40

    • SHA1

      07643f0e5eb0ea21c28670b4367ce55f083e0079

    • SHA256

      48162f18f287eec7be3316435769528c652ca35c6de3027f2175a4511b024de2

    • SHA512

      edc32e291dd289b3401393e5551d5c7021bc89c105005b544ee810e491fc8be84fe2881be974707d69b20b79ce25d0a7663387aba64ad21d7f353250de04b7d6

    • SSDEEP

      12288:6kL94Q+T9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:dHS9XvEhdfJkKSkU3kHyuaRB5t6k0IJm

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks