Overview

overview

10

Static

static

10

NEAS.441e3...JC.exe

windows7-x64

10

NEAS.441e3...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.441e3930ab46b640b9ef42a6228c5320_JC.exe

  • Size

    704KB

  • Sample

    231102-msj9escf77

  • MD5

    441e3930ab46b640b9ef42a6228c5320

  • SHA1

    872ac79049a6672a0b5d0d4ab00c548e1f013965

  • SHA256

    7ad45a12989557a3f0ed13c604262cb171c4c52e79b6245add59ae9fad8a23cc

  • SHA512

    e1b93020a332eb444a3ac6c1981765e06a62718a875e60fa383e57bb26fae6cebe84b716973ce8af6692ae35b164c1834586c899d8d71b98915f592057ee9efa

  • SSDEEP

    12288:rmdhx1gDrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5b:KdhXgDrQg5Wm0BmmvFimm0MTP7hm0b

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.441e3930ab46b640b9ef42a6228c5320_JC.exe

    • Size

      704KB

    • MD5

      441e3930ab46b640b9ef42a6228c5320

    • SHA1

      872ac79049a6672a0b5d0d4ab00c548e1f013965

    • SHA256

      7ad45a12989557a3f0ed13c604262cb171c4c52e79b6245add59ae9fad8a23cc

    • SHA512

      e1b93020a332eb444a3ac6c1981765e06a62718a875e60fa383e57bb26fae6cebe84b716973ce8af6692ae35b164c1834586c899d8d71b98915f592057ee9efa

    • SSDEEP

      12288:rmdhx1gDrQg5W/+zrWAI5KFum/+zrWAIAqWim/+zrWAI5KFHTP7rXFr/+zrWAI5b:KdhXgDrQg5Wm0BmmvFimm0MTP7hm0b

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks