Overview

overview

10

Static

static

10

NEAS.e5511...JC.exe

windows7-x64

10

NEAS.e5511...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e5511fabc66d14ffd9284334be657660_JC.exe

  • Size

    165KB

  • Sample

    231102-bpw82aeh31

  • MD5

    e5511fabc66d14ffd9284334be657660

  • SHA1

    4f343331244a6bd361ac71bfca3245d167368ee1

  • SHA256

    aeff2115db5f7b533f81e2578ee8780a0d7d60c533f2eead87b9756ae54d513f

  • SHA512

    c512311abab85fca4d321313696f9e2f9efedfd4b72e2996f0bbaf4aee1bce04055bbb2815223a19b48fa4e472466a81242fb77db1537f36746e688733ba9149

  • SSDEEP

    3072:MLyYP2xRZ+742DChQbGxI8opFWehLrCimBaH8UH300UqrJ:McX8742DeQbGxI8oPWHpaH8m3pUqN

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e5511fabc66d14ffd9284334be657660_JC.exe

    • Size

      165KB

    • MD5

      e5511fabc66d14ffd9284334be657660

    • SHA1

      4f343331244a6bd361ac71bfca3245d167368ee1

    • SHA256

      aeff2115db5f7b533f81e2578ee8780a0d7d60c533f2eead87b9756ae54d513f

    • SHA512

      c512311abab85fca4d321313696f9e2f9efedfd4b72e2996f0bbaf4aee1bce04055bbb2815223a19b48fa4e472466a81242fb77db1537f36746e688733ba9149

    • SSDEEP

      3072:MLyYP2xRZ+742DChQbGxI8opFWehLrCimBaH8UH300UqrJ:McX8742DeQbGxI8oPWHpaH8m3pUqN

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks