Overview

overview

10

Static

static

10

NEAS.d8254...JC.exe

windows7-x64

10

NEAS.d8254...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.d825416e51ae1bf070cc3e4716569e20_JC.exe

  • Size

    378KB

  • Sample

    231104-x81apafh23

  • MD5

    d825416e51ae1bf070cc3e4716569e20

  • SHA1

    1f21b7d97182fd006ffbf85d8a1ca4f00310bd14

  • SHA256

    81d3f1bdfe55d74ccfbc84816acfd0e978ec6303323ed1540e5d98bb7a4b70b1

  • SHA512

    d667ea218c5d97a502a8531466be0ceea77be959921b086177df138d4deb53817e1d1173843e8dbd87715f319d397c3c65a50f6d5e0c861c14c95bbb64d5524d

  • SSDEEP

    6144:B9Li0LxxiaEIeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:B9+hjIeYr75lTefkY660fIaDZkY660fR

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d825416e51ae1bf070cc3e4716569e20_JC.exe

    • Size

      378KB

    • MD5

      d825416e51ae1bf070cc3e4716569e20

    • SHA1

      1f21b7d97182fd006ffbf85d8a1ca4f00310bd14

    • SHA256

      81d3f1bdfe55d74ccfbc84816acfd0e978ec6303323ed1540e5d98bb7a4b70b1

    • SHA512

      d667ea218c5d97a502a8531466be0ceea77be959921b086177df138d4deb53817e1d1173843e8dbd87715f319d397c3c65a50f6d5e0c861c14c95bbb64d5524d

    • SSDEEP

      6144:B9Li0LxxiaEIeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:B9+hjIeYr75lTefkY660fIaDZkY660fR

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks