Overview

overview

10

Static

static

10

NEAS.cb9f1...JC.exe

windows7-x64

10

NEAS.cb9f1...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.cb9f1f1fd9889616ee0c28208dc95842_JC.exe

  • Size

    76KB

  • Sample

    231102-v2rnvsda6t

  • MD5

    cb9f1f1fd9889616ee0c28208dc95842

  • SHA1

    be5f0eb658b68f568330f85f6cd149e6d1efefcd

  • SHA256

    3782272ceb09c8cad2e0eb016f47393aafb27eedcfbf952f539b0c701f69e6d6

  • SHA512

    b437617c5bb515360b1fe18921da6a9e9fef969eccf8a0f2f2318ffba0410e2fb7de8e15d7c3c364a556756467a69ad6ef3f3be7c3b704ab703319bfab1b9c93

  • SSDEEP

    1536:L/V0Qz4I/6c/AzHEoaVKPNhLVvHioQV+/eCeyvCQ:bV0QU4AzHEoaslhLFHrk+

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.cb9f1f1fd9889616ee0c28208dc95842_JC.exe

    • Size

      76KB

    • MD5

      cb9f1f1fd9889616ee0c28208dc95842

    • SHA1

      be5f0eb658b68f568330f85f6cd149e6d1efefcd

    • SHA256

      3782272ceb09c8cad2e0eb016f47393aafb27eedcfbf952f539b0c701f69e6d6

    • SHA512

      b437617c5bb515360b1fe18921da6a9e9fef969eccf8a0f2f2318ffba0410e2fb7de8e15d7c3c364a556756467a69ad6ef3f3be7c3b704ab703319bfab1b9c93

    • SSDEEP

      1536:L/V0Qz4I/6c/AzHEoaVKPNhLVvHioQV+/eCeyvCQ:bV0QU4AzHEoaslhLFHrk+

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks