Overview

overview

10

Static

static

10

NEAS.88780...JC.exe

windows7-x64

10

NEAS.88780...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.8878090fefb57a30f26980b64105a510_JC.exe

  • Size

    69KB

  • Sample

    231104-k4d6fagf67

  • MD5

    8878090fefb57a30f26980b64105a510

  • SHA1

    1abf43beb46ec9ee2ae64bad281ea5e09aed0504

  • SHA256

    6fde0c428ad2534c92daa6eb83a6c0fabe057d21321398e68517ece24ff63bf5

  • SHA512

    8865ad4dbe60720b8d974134ff6aae8d5c55c00c1ff129ce34933ca73f525f7383d532ff180e44ad7c66d95dcbf5fda205e4f0ea25ea2dfb267d2db27a2cd512

  • SSDEEP

    1536:WIUSZBz57ggdN2ZoIVFMu3uu4Ksh3oiR7A6JWRNein/GFZCeDAyY:WRS/a42ZoIXM+sX1RcTRNFn/GFZC1yY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.8878090fefb57a30f26980b64105a510_JC.exe

    • Size

      69KB

    • MD5

      8878090fefb57a30f26980b64105a510

    • SHA1

      1abf43beb46ec9ee2ae64bad281ea5e09aed0504

    • SHA256

      6fde0c428ad2534c92daa6eb83a6c0fabe057d21321398e68517ece24ff63bf5

    • SHA512

      8865ad4dbe60720b8d974134ff6aae8d5c55c00c1ff129ce34933ca73f525f7383d532ff180e44ad7c66d95dcbf5fda205e4f0ea25ea2dfb267d2db27a2cd512

    • SSDEEP

      1536:WIUSZBz57ggdN2ZoIVFMu3uu4Ksh3oiR7A6JWRNein/GFZCeDAyY:WRS/a42ZoIXM+sX1RcTRNFn/GFZC1yY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks