Overview

overview

10

Static

static

10

NEAS.ba243...JC.exe

windows7-x64

10

NEAS.ba243...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.ba2433f3f80b91429b40e59cd87b7c80_JC.exe

  • Size

    133KB

  • Sample

    231103-xbe89aaf76

  • MD5

    ba2433f3f80b91429b40e59cd87b7c80

  • SHA1

    68d7916b1f1b82a42e25fa6a120e2656c743a026

  • SHA256

    c4d927a4b471b589f7a4625a315adbeb974fceb556087c2f9e32bf64bd04a110

  • SHA512

    62ccf135b1545d27382fba4e0cbe37c784adf68a1247086220e4543e378d8bb96d83416cbd5922aaec0e616676bf234c5c874f736aa1ed3135aa6073d21b6b74

  • SSDEEP

    3072:4ujuvVICKOE7Rvf5KG7UDd0pCrQIFdFtLwzTa:NuvzE7RnMG7Ux0ocIPF9wzG

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.ba2433f3f80b91429b40e59cd87b7c80_JC.exe

    • Size

      133KB

    • MD5

      ba2433f3f80b91429b40e59cd87b7c80

    • SHA1

      68d7916b1f1b82a42e25fa6a120e2656c743a026

    • SHA256

      c4d927a4b471b589f7a4625a315adbeb974fceb556087c2f9e32bf64bd04a110

    • SHA512

      62ccf135b1545d27382fba4e0cbe37c784adf68a1247086220e4543e378d8bb96d83416cbd5922aaec0e616676bf234c5c874f736aa1ed3135aa6073d21b6b74

    • SSDEEP

      3072:4ujuvVICKOE7Rvf5KG7UDd0pCrQIFdFtLwzTa:NuvzE7RnMG7Ux0ocIPF9wzG

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks