Overview

overview

10

Static

static

10

NEAS.ea7e5...JC.exe

windows7-x64

10

NEAS.ea7e5...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.ea7e55b84734e37bcb82a54aaca71bf0_JC.exe

  • Size

    340KB

  • Sample

    231103-bgl34abg99

  • MD5

    ea7e55b84734e37bcb82a54aaca71bf0

  • SHA1

    4f49ac7bceebd26fe962421530f72ee83bb33d60

  • SHA256

    ee556bc917962c4c95492f734ae6e0f8407f6f57d7d5a5d6cba03a873de2d02b

  • SHA512

    17bb52d8e8f6e4f904eecd7a1a780efa8ab821c55e4724d0bd5dcc6042f36b993ba676c1c93a69089e9a0e82883f7c3ec8323aeee32640bf212385f27852fde3

  • SSDEEP

    6144:DEj+n8cZUIyedZwlNPjLs+H8rtMsQBJyJyymeH:DEjDeyGZwlNPjLYRMsXJvmeH

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ea7e55b84734e37bcb82a54aaca71bf0_JC.exe

    • Size

      340KB

    • MD5

      ea7e55b84734e37bcb82a54aaca71bf0

    • SHA1

      4f49ac7bceebd26fe962421530f72ee83bb33d60

    • SHA256

      ee556bc917962c4c95492f734ae6e0f8407f6f57d7d5a5d6cba03a873de2d02b

    • SHA512

      17bb52d8e8f6e4f904eecd7a1a780efa8ab821c55e4724d0bd5dcc6042f36b993ba676c1c93a69089e9a0e82883f7c3ec8323aeee32640bf212385f27852fde3

    • SSDEEP

      6144:DEj+n8cZUIyedZwlNPjLs+H8rtMsQBJyJyymeH:DEjDeyGZwlNPjLYRMsXJvmeH

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks