Overview

overview

10

Static

static

10

NEAS.3f52f...JC.exe

windows7-x64

10

NEAS.3f52f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3f52f4df5616715c8c01d181b44dcaa0_JC.exe

  • Size

    85KB

  • Sample

    231102-ghkjjsgc4t

  • MD5

    3f52f4df5616715c8c01d181b44dcaa0

  • SHA1

    22deb7beba27b934804dbc495c38d8617cc84953

  • SHA256

    72148e275ae80480f8cc055d6c115c572c255e037e1e6c29dab41cd36f094af7

  • SHA512

    49b9d5bb2a0c27e09ec3b3cf837b61e9b9d0d8eea71ecd1c7b9737cb5baddfcd4991bba5220870e9ead6c86439d6e1526091280aad4b8c5c496df2ed99df5e3d

  • SSDEEP

    1536:g2u4VvxDpVVZF9xWre2OgxOpa5uqIO2LHlYMQ262AjCsQ2PCZZrqOlNfVSLUK+:o4VvxtVVZF9xWrXOA5uPHuMQH2qC7ZQA

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.3f52f4df5616715c8c01d181b44dcaa0_JC.exe

    • Size

      85KB

    • MD5

      3f52f4df5616715c8c01d181b44dcaa0

    • SHA1

      22deb7beba27b934804dbc495c38d8617cc84953

    • SHA256

      72148e275ae80480f8cc055d6c115c572c255e037e1e6c29dab41cd36f094af7

    • SHA512

      49b9d5bb2a0c27e09ec3b3cf837b61e9b9d0d8eea71ecd1c7b9737cb5baddfcd4991bba5220870e9ead6c86439d6e1526091280aad4b8c5c496df2ed99df5e3d

    • SSDEEP

      1536:g2u4VvxDpVVZF9xWre2OgxOpa5uqIO2LHlYMQ262AjCsQ2PCZZrqOlNfVSLUK+:o4VvxtVVZF9xWrXOA5uPHuMQH2qC7ZQA

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks