Overview

overview

10

Static

static

10

NEAS.d56be...JC.exe

windows7-x64

10

NEAS.d56be...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d56be044d2aef1c6dc11f0e02709dfa0_JC.exe

  • Size

    128KB

  • Sample

    231102-cz8kgsfc9y

  • MD5

    d56be044d2aef1c6dc11f0e02709dfa0

  • SHA1

    d81c19731b6f3c23209ecd6e120b047af9ff1902

  • SHA256

    5e51710134bf5cca7d99423b56944030a7b4d1cf79e5309287e6cca1b3636fb2

  • SHA512

    3bcaf4619f0296a40adf3b70d4aa651c979985db44fd2918af429d5ae331e8a7fc2405dca875b45f6bdfb78f3d01dedf2cc92d3ad649edc084af7550089fa9a0

  • SSDEEP

    1536:oSbnyg64rbtLP8aM12eK+XhuUA+Wg2JAKsAmhQq7twhXNnZcWiqgF72S7f/QuMXC:oSjY4rbtosgEp8gspCXJmW2wS7IrHrYj

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d56be044d2aef1c6dc11f0e02709dfa0_JC.exe

    • Size

      128KB

    • MD5

      d56be044d2aef1c6dc11f0e02709dfa0

    • SHA1

      d81c19731b6f3c23209ecd6e120b047af9ff1902

    • SHA256

      5e51710134bf5cca7d99423b56944030a7b4d1cf79e5309287e6cca1b3636fb2

    • SHA512

      3bcaf4619f0296a40adf3b70d4aa651c979985db44fd2918af429d5ae331e8a7fc2405dca875b45f6bdfb78f3d01dedf2cc92d3ad649edc084af7550089fa9a0

    • SSDEEP

      1536:oSbnyg64rbtLP8aM12eK+XhuUA+Wg2JAKsAmhQq7twhXNnZcWiqgF72S7f/QuMXC:oSjY4rbtosgEp8gspCXJmW2wS7IrHrYj

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks