Overview

overview

10

Static

static

10

NEAS.b871f...JC.exe

windows7-x64

10

NEAS.b871f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.b871fa310fddef4048597b4ff4f50ee0_JC.exe

  • Size

    107KB

  • Sample

    231104-3zjt8sge2w

  • MD5

    b871fa310fddef4048597b4ff4f50ee0

  • SHA1

    d5501626f1bceb4ef09de4bf118da8abb6d2c44f

  • SHA256

    844249c759c60a343f4eee9b857442692b55e3875f97ec39f3b138caca02e131

  • SHA512

    c8088c4b7ee4aed6993a77833ddac21bd0bb0fba069ca6b824970afd6a3dda872277862158312aff6b7d0e02e38e3c43d44a94d9da8a5b21e73a84199f8d014e

  • SSDEEP

    3072:Mqx34BCbb6NxH/RXufzhaMU7uihJ5233y:L8CKDHJXYhni5i3y

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.b871fa310fddef4048597b4ff4f50ee0_JC.exe

    • Size

      107KB

    • MD5

      b871fa310fddef4048597b4ff4f50ee0

    • SHA1

      d5501626f1bceb4ef09de4bf118da8abb6d2c44f

    • SHA256

      844249c759c60a343f4eee9b857442692b55e3875f97ec39f3b138caca02e131

    • SHA512

      c8088c4b7ee4aed6993a77833ddac21bd0bb0fba069ca6b824970afd6a3dda872277862158312aff6b7d0e02e38e3c43d44a94d9da8a5b21e73a84199f8d014e

    • SSDEEP

      3072:Mqx34BCbb6NxH/RXufzhaMU7uihJ5233y:L8CKDHJXYhni5i3y

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks