Overview

overview

10

Static

static

10

NEAS.da4af...JC.exe

windows7-x64

10

NEAS.da4af...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.da4af5dc8a31461696254d49f1b795ac_JC.exe

  • Size

    401KB

  • Sample

    231103-wa7rfafe5v

  • MD5

    da4af5dc8a31461696254d49f1b795ac

  • SHA1

    e5b2ebaa25324b1dbf7d8fa797fccdb84fee23db

  • SHA256

    667d63f9e26f809bd6f56a26c2ae02bbe2ab00e60a5ba0a268b0d04fe338c014

  • SHA512

    d2a27a4f14f4a0cf982d5f84926a905b1cade48640d782b849934ef16220cc960320c6ab3964036562567f89f91b0f4b9685dce6b05506fdd02c6516c9dcc0b9

  • SSDEEP

    6144:l68fWaC2FAg8ndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:5G2F6ndpV6yYP4rbpV6yYPg058KrY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.da4af5dc8a31461696254d49f1b795ac_JC.exe

    • Size

      401KB

    • MD5

      da4af5dc8a31461696254d49f1b795ac

    • SHA1

      e5b2ebaa25324b1dbf7d8fa797fccdb84fee23db

    • SHA256

      667d63f9e26f809bd6f56a26c2ae02bbe2ab00e60a5ba0a268b0d04fe338c014

    • SHA512

      d2a27a4f14f4a0cf982d5f84926a905b1cade48640d782b849934ef16220cc960320c6ab3964036562567f89f91b0f4b9685dce6b05506fdd02c6516c9dcc0b9

    • SSDEEP

      6144:l68fWaC2FAg8ndpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836PGyA7:5G2F6ndpV6yYP4rbpV6yYPg058KrY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks