Overview

overview

10

Static

static

10

NEAS.ba125...JC.exe

windows7-x64

10

NEAS.ba125...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ba125407b9c158c98938bc5da775a2d0_JC.exe

  • Size

    236KB

  • Sample

    231102-zr6ggshe29

  • MD5

    ba125407b9c158c98938bc5da775a2d0

  • SHA1

    675efc7bf25b31979e7544def8a74ef26ac1678e

  • SHA256

    3dc6935be7f03299294a11655e8ee1a92b5c93a01a8a650477fc0dfeb431b384

  • SHA512

    5423ef0194c8a71cd6368672dfb155fad05c3452a4c990ac90a1e7d6bbd967840ad883f9e68d8145773d8068544e76c4de88f4ebf898e0da8a6e0ad3e6a7eb80

  • SSDEEP

    3072:wxhShgxJ9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:TgxsDshsrtMsQB4

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ba125407b9c158c98938bc5da775a2d0_JC.exe

    • Size

      236KB

    • MD5

      ba125407b9c158c98938bc5da775a2d0

    • SHA1

      675efc7bf25b31979e7544def8a74ef26ac1678e

    • SHA256

      3dc6935be7f03299294a11655e8ee1a92b5c93a01a8a650477fc0dfeb431b384

    • SHA512

      5423ef0194c8a71cd6368672dfb155fad05c3452a4c990ac90a1e7d6bbd967840ad883f9e68d8145773d8068544e76c4de88f4ebf898e0da8a6e0ad3e6a7eb80

    • SSDEEP

      3072:wxhShgxJ9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:TgxsDshsrtMsQB4

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks