Overview

overview

10

Static

static

10

NEAS.f0c6b...JC.exe

windows7-x64

10

NEAS.f0c6b...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f0c6b0f3d99c8cd647d3ba94ccabe960_JC.exe

  • Size

    391KB

  • Sample

    231102-k99vasca24

  • MD5

    f0c6b0f3d99c8cd647d3ba94ccabe960

  • SHA1

    c5f27283a29bd601f61c387c612f59137909fd6f

  • SHA256

    f7bea47568de61eff3a597235072ab55b2cc5d80fc165b54dcebcf348d9846a9

  • SHA512

    07a50d7107b03f72b1c696f87bab52d4da571b1c40429031913ef707a924b8b60b9dc0f5628cc2e0a16aa3e5e16624881e03f6d36d41d8af0aca26e0ca611eb8

  • SSDEEP

    12288:BcfT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Bq9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f0c6b0f3d99c8cd647d3ba94ccabe960_JC.exe

    • Size

      391KB

    • MD5

      f0c6b0f3d99c8cd647d3ba94ccabe960

    • SHA1

      c5f27283a29bd601f61c387c612f59137909fd6f

    • SHA256

      f7bea47568de61eff3a597235072ab55b2cc5d80fc165b54dcebcf348d9846a9

    • SHA512

      07a50d7107b03f72b1c696f87bab52d4da571b1c40429031913ef707a924b8b60b9dc0f5628cc2e0a16aa3e5e16624881e03f6d36d41d8af0aca26e0ca611eb8

    • SSDEEP

      12288:BcfT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Bq9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks