Overview

overview

10

Static

static

10

NEAS.5eaf9...JC.exe

windows7-x64

10

NEAS.5eaf9...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.5eaf9944bd22dfdb2f932df58a7998f0_JC.exe

  • Size

    1.2MB

  • Sample

    231101-p9z3bage41

  • MD5

    5eaf9944bd22dfdb2f932df58a7998f0

  • SHA1

    ecc4aad2a49adf744ee623328c6823ddf22fbf93

  • SHA256

    203e582c3c4e134e31ee3c7c8dc41da7d63433f93f645f6a864dd27df48a32bb

  • SHA512

    6bee9570414d0729e52c549c72123be529962a6899b8b6cb27ae63ed27aaed78c1e2fea3af6e8dee66ca117f01454a8328c9c9f4cbf2f3e2f4c78404946301b0

  • SSDEEP

    24576:THBm0BmmvFimm0MTP7hm0BmmvFimm0SGT8P402fo06YE1+91vK3xDWGk4A:TZiLiZGT8P4Zfo06h1+91vOaGBA

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.5eaf9944bd22dfdb2f932df58a7998f0_JC.exe

    • Size

      1.2MB

    • MD5

      5eaf9944bd22dfdb2f932df58a7998f0

    • SHA1

      ecc4aad2a49adf744ee623328c6823ddf22fbf93

    • SHA256

      203e582c3c4e134e31ee3c7c8dc41da7d63433f93f645f6a864dd27df48a32bb

    • SHA512

      6bee9570414d0729e52c549c72123be529962a6899b8b6cb27ae63ed27aaed78c1e2fea3af6e8dee66ca117f01454a8328c9c9f4cbf2f3e2f4c78404946301b0

    • SSDEEP

      24576:THBm0BmmvFimm0MTP7hm0BmmvFimm0SGT8P402fo06YE1+91vK3xDWGk4A:TZiLiZGT8P4Zfo06h1+91vOaGBA

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks