Extracted

• • Target

    NEAS.b0e6031ec76a7280160b88fbd4eef580_JC.exe

  • Size

    237KB

  • MD5

    b0e6031ec76a7280160b88fbd4eef580

  • SHA1

    3251f552ad4dcd6fe902efabcbf62b8d5b137ca7

  • SHA256

    086145987c61866fc40d088164cac5dc5729fc141cd1126acd1ecbbeb82e1936

  • SHA512

    3f444bf31f44e613a3dcab13ffc6d02a4f19c8c61c0dd10197ce4ed6e3548c1c736c0e0c06a600209ba5ed878e2c263ed431e3bdd5aa77010d1890fcbbb5a7fd

  • SSDEEP

    1536:9RsvcdCQjosnvnjs6SQ1EVrPdDG/PEzxVJsPcbYDOYrmwd8eCwe5cJ4q:LsKjRvnhSGYB0EzXJsPcEDOHDzF55q

  Score

  10^/10

  dropperpersistencetrojan

  • Malware Backdoor - Berbew

    Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    persistencedroppertrojan

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2