Overview

overview

10

Static

static

10

NEAS.720d8...JC.exe

windows7-x64

10

NEAS.720d8...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.720d815398f4ff56ecf6fb58fb7a2ff0_JC.exe

  • Size

    107KB

  • Sample

    231024-as48dabb79

  • MD5

    720d815398f4ff56ecf6fb58fb7a2ff0

  • SHA1

    cc53fb48cd89e917a854bd253800f74c76f792d6

  • SHA256

    ac4d17f2f6741569d19ca8df15750738f16805496f4e84aed80e4d3552c9774d

  • SHA512

    162215453b5400dfc0c33fa984f0b8b25f11ba00a60550d306b3785c002062d5a124bbed3479af5d5dfafa22e1a825fba4cffbb0faf7e02d1258d9580e5bae79

  • SSDEEP

    1536:zXkzovbL659Bjx5f48emJ+UnBb2LCaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:Tsom9Bf9emUQ4CaMU7uihJ5233y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.720d815398f4ff56ecf6fb58fb7a2ff0_JC.exe

    • Size

      107KB

    • MD5

      720d815398f4ff56ecf6fb58fb7a2ff0

    • SHA1

      cc53fb48cd89e917a854bd253800f74c76f792d6

    • SHA256

      ac4d17f2f6741569d19ca8df15750738f16805496f4e84aed80e4d3552c9774d

    • SHA512

      162215453b5400dfc0c33fa984f0b8b25f11ba00a60550d306b3785c002062d5a124bbed3479af5d5dfafa22e1a825fba4cffbb0faf7e02d1258d9580e5bae79

    • SSDEEP

      1536:zXkzovbL659Bjx5f48emJ+UnBb2LCaIZTJ+7LhkiB0MPiKeEAgHD/Chx3y:Tsom9Bf9emUQ4CaMU7uihJ5233y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks