Overview

overview

10

Static

static

10

NEAS.c84be...JC.exe

windows7-x64

10

NEAS.c84be...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c84be6784a5b0c727844f5bf63f4bea0_JC.exe

  • Size

    404KB

  • Sample

    231101-1r1fxafc69

  • MD5

    c84be6784a5b0c727844f5bf63f4bea0

  • SHA1

    16c8957eaa9770e55952f206a96f17989ee1ef8c

  • SHA256

    3db15bf980e8f69e434c72a8b1b882d25aa47bf6d68c7d2725b404d9393da16a

  • SHA512

    2fd2cbc48b0ca946774c458689caeea027d081e7059733f1534ab9488259b0ac39c8195d82bf7f466c9d862405632b4805833e7cfb53a42ef35dce507c36620e

  • SSDEEP

    6144:m2qPQmwXpENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:kQOwcMpV6yYP4rbpV6yYPg058KS

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c84be6784a5b0c727844f5bf63f4bea0_JC.exe

    • Size

      404KB

    • MD5

      c84be6784a5b0c727844f5bf63f4bea0

    • SHA1

      16c8957eaa9770e55952f206a96f17989ee1ef8c

    • SHA256

      3db15bf980e8f69e434c72a8b1b882d25aa47bf6d68c7d2725b404d9393da16a

    • SHA512

      2fd2cbc48b0ca946774c458689caeea027d081e7059733f1534ab9488259b0ac39c8195d82bf7f466c9d862405632b4805833e7cfb53a42ef35dce507c36620e

    • SSDEEP

      6144:m2qPQmwXpENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:kQOwcMpV6yYP4rbpV6yYPg058KS

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks