Overview

overview

10

Static

static

10

NEAS.a7865...JC.exe

windows7-x64

10

NEAS.a7865...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.a7865add190901ba278fabedd47f77e0_JC.exe

  • Size

    177KB

  • Sample

    231101-kbld2seh66

  • MD5

    a7865add190901ba278fabedd47f77e0

  • SHA1

    bcd1f93180c71e44c6191d787932d467af5d90ae

  • SHA256

    6a2ae18bea0745bf67b3f378ad50ac520c1c83301f2cb887b9e05818c19233fe

  • SHA512

    bde44dfab912f683c7c60d16da8d90b9d3f6499d55425f5221b2884961b403d050cff7ce3f66067d9a1978ede65f93afd2196712072090811911ce3beeefcabd

  • SSDEEP

    3072:0iniuADbTzkdpEVREskg3q/haR5sS+vfvLHhjh8g1eGFyOsa:0inWbTwIGxga/harSvLHh98gwG0ON

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.a7865add190901ba278fabedd47f77e0_JC.exe

    • Size

      177KB

    • MD5

      a7865add190901ba278fabedd47f77e0

    • SHA1

      bcd1f93180c71e44c6191d787932d467af5d90ae

    • SHA256

      6a2ae18bea0745bf67b3f378ad50ac520c1c83301f2cb887b9e05818c19233fe

    • SHA512

      bde44dfab912f683c7c60d16da8d90b9d3f6499d55425f5221b2884961b403d050cff7ce3f66067d9a1978ede65f93afd2196712072090811911ce3beeefcabd

    • SSDEEP

      3072:0iniuADbTzkdpEVREskg3q/haR5sS+vfvLHhjh8g1eGFyOsa:0inWbTwIGxga/harSvLHh98gwG0ON

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks