Overview

overview

10

Static

static

10

NEAS.af1c2...JC.exe

windows7-x64

10

NEAS.af1c2...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.af1c2d3fcb1c9e4ca379b21b44010a80_JC.exe

  • Size

    78KB

  • Sample

    231101-pvr36agc8s

  • MD5

    af1c2d3fcb1c9e4ca379b21b44010a80

  • SHA1

    82ae061e09dae9ca73c6d9a2b20f048eb74a013e

  • SHA256

    1c55bb320967bf9f4ac09a717c297082ae5e747c03e7f1a48eec3b512517aa55

  • SHA512

    003b6f5a10480d2fe2d0d67e20915b0325e56e6120eabd6f07c18f73401d0531d7410f7045e96e834b30cb1b4b9654ebbdb726125e38e0d71c26ba8bbd9088b9

  • SSDEEP

    1536:rhOQYQBBZwCDJt1oenOusuZ90ib6yf5oAnqDM+4yyF:1OQzB5t1oYZ6ibCuq4cyF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.af1c2d3fcb1c9e4ca379b21b44010a80_JC.exe

    • Size

      78KB

    • MD5

      af1c2d3fcb1c9e4ca379b21b44010a80

    • SHA1

      82ae061e09dae9ca73c6d9a2b20f048eb74a013e

    • SHA256

      1c55bb320967bf9f4ac09a717c297082ae5e747c03e7f1a48eec3b512517aa55

    • SHA512

      003b6f5a10480d2fe2d0d67e20915b0325e56e6120eabd6f07c18f73401d0531d7410f7045e96e834b30cb1b4b9654ebbdb726125e38e0d71c26ba8bbd9088b9

    • SSDEEP

      1536:rhOQYQBBZwCDJt1oenOusuZ90ib6yf5oAnqDM+4yyF:1OQzB5t1oYZ6ibCuq4cyF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks