Overview

overview

10

Static

static

10

NEAS.3998b...JC.exe

windows7-x64

10

NEAS.3998b...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.3998bf5ca3a4976064d9341bdb4e5270_JC.exe

  • Size

    106KB

  • Sample

    231104-13naqahg58

  • MD5

    3998bf5ca3a4976064d9341bdb4e5270

  • SHA1

    ba78d1d1d31d5f8d1e82f95d70a8526877811dad

  • SHA256

    d7c4069691899624df2c45cf72c7673b8b5ea32d4c4de93019810a5c8343c2bf

  • SHA512

    6c0aac0694e1acde411feaca6c4827a4a9a1d20b2db02043f240fbfd8ec7024c0d29984bb9980a7189ad4e9be4ec96268efca7820eb5357c124d7ee9c12e3640

  • SSDEEP

    3072:h2lF/Q4Mt6E/4TP1Vk6rXX1WdTCn93OGey/ZhC:IDQftrCVrXoTCndOGeKY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.3998bf5ca3a4976064d9341bdb4e5270_JC.exe

    • Size

      106KB

    • MD5

      3998bf5ca3a4976064d9341bdb4e5270

    • SHA1

      ba78d1d1d31d5f8d1e82f95d70a8526877811dad

    • SHA256

      d7c4069691899624df2c45cf72c7673b8b5ea32d4c4de93019810a5c8343c2bf

    • SHA512

      6c0aac0694e1acde411feaca6c4827a4a9a1d20b2db02043f240fbfd8ec7024c0d29984bb9980a7189ad4e9be4ec96268efca7820eb5357c124d7ee9c12e3640

    • SSDEEP

      3072:h2lF/Q4Mt6E/4TP1Vk6rXX1WdTCn93OGey/ZhC:IDQftrCVrXoTCndOGeKY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks