Overview

overview

10

Static

static

10

NEAS.e5bec...JC.exe

windows7-x64

10

NEAS.e5bec...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e5bec188d2125b84d3e4b4c1290bdca0_JC.exe

  • Size

    69KB

  • Sample

    231104-zlrfdaee9t

  • MD5

    e5bec188d2125b84d3e4b4c1290bdca0

  • SHA1

    28b90b9b939735a303e9b1d4b92a8b1d22716f77

  • SHA256

    c4da04a45561ce9d2559c8aa6b41b384d00e1637b6ca43f4199933fb45f72321

  • SHA512

    47c6511ed2b4d62caa9ac1bc442661da8d336af7e717f3e9d6e89afdbac478464b51261daf54ec346eb829b0c8ddd9eb7125a4cc2e45481e2cb498ef01584df9

  • SSDEEP

    1536:5IcRSC6LYOpJSbbyrBR6x0XYNein/GFZCeDAyY:OVCU1pJkbyr/Q0XYNFn/GFZC1yY

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e5bec188d2125b84d3e4b4c1290bdca0_JC.exe

    • Size

      69KB

    • MD5

      e5bec188d2125b84d3e4b4c1290bdca0

    • SHA1

      28b90b9b939735a303e9b1d4b92a8b1d22716f77

    • SHA256

      c4da04a45561ce9d2559c8aa6b41b384d00e1637b6ca43f4199933fb45f72321

    • SHA512

      47c6511ed2b4d62caa9ac1bc442661da8d336af7e717f3e9d6e89afdbac478464b51261daf54ec346eb829b0c8ddd9eb7125a4cc2e45481e2cb498ef01584df9

    • SSDEEP

      1536:5IcRSC6LYOpJSbbyrBR6x0XYNein/GFZCeDAyY:OVCU1pJkbyr/Q0XYNFn/GFZC1yY

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks