Overview

overview

10

Static

static

10

NEAS.81927...JC.exe

windows7-x64

10

NEAS.81927...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.819277b60c3c1d23f5ec3b8eff9d3ee3_JC.exe

  • Size

    329KB

  • Sample

    231102-vk1v7scf5w

  • MD5

    819277b60c3c1d23f5ec3b8eff9d3ee3

  • SHA1

    a9770139a1e978d1249684871800f87b45fd4bfe

  • SHA256

    8aedaae14dd97954219e3175840941a10f8d31e71e26b54f57199c2a9fb9848d

  • SHA512

    20df4020eda93871365566f029f1fef8215d1e1328ef5637468b35347b2c18e62645a2b3e438020e5a274adf0c4106546ec50c9f72dcc63c57be43b20bd0336a

  • SSDEEP

    6144:L+jAKdws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:L+jW7LKQweY0sam38vZwIBIE1+J3pQtI

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.819277b60c3c1d23f5ec3b8eff9d3ee3_JC.exe

    • Size

      329KB

    • MD5

      819277b60c3c1d23f5ec3b8eff9d3ee3

    • SHA1

      a9770139a1e978d1249684871800f87b45fd4bfe

    • SHA256

      8aedaae14dd97954219e3175840941a10f8d31e71e26b54f57199c2a9fb9848d

    • SHA512

      20df4020eda93871365566f029f1fef8215d1e1328ef5637468b35347b2c18e62645a2b3e438020e5a274adf0c4106546ec50c9f72dcc63c57be43b20bd0336a

    • SSDEEP

      6144:L+jAKdws+H3Lb+Qw/WYgFIgsh0KXoQr8jTQjewInBIE1+J3RzAHV+EueR2F:L+jW7LKQweY0sam38vZwIBIE1+J3pQtI

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks