Overview

overview

10

Static

static

10

NEAS.ec82f...JC.exe

windows7-x64

10

NEAS.ec82f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ec82fa8c7881fceb5f666243461d4cf9_JC.exe

  • Size

    226KB

  • Sample

    231102-v6cqhafb22

  • MD5

    ec82fa8c7881fceb5f666243461d4cf9

  • SHA1

    a8ec67b8b728f674df5ecbca17faf8eaeacc8fff

  • SHA256

    52d83ec5c942ac6bdc4ba2f8f7496dd79f6a0b9a9f29a5bf4fccce6b2c3ed088

  • SHA512

    bfa67da8f58bd71a94ce65c2a7aafee127ddbfb9fe1e8989f5927d623d94e39e9c6875811476f6de4d8924390505194a473313e3ee380638045f2e2deb209ddf

  • SSDEEP

    6144:MMv2X+4dFJaMfXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:MmsFJD5IKrEAlnLAg

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ec82fa8c7881fceb5f666243461d4cf9_JC.exe

    • Size

      226KB

    • MD5

      ec82fa8c7881fceb5f666243461d4cf9

    • SHA1

      a8ec67b8b728f674df5ecbca17faf8eaeacc8fff

    • SHA256

      52d83ec5c942ac6bdc4ba2f8f7496dd79f6a0b9a9f29a5bf4fccce6b2c3ed088

    • SHA512

      bfa67da8f58bd71a94ce65c2a7aafee127ddbfb9fe1e8989f5927d623d94e39e9c6875811476f6de4d8924390505194a473313e3ee380638045f2e2deb209ddf

    • SSDEEP

      6144:MMv2X+4dFJaMfXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:MmsFJD5IKrEAlnLAg

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks