Overview

overview

10

Static

static

10

NEAS.bc724...JC.exe

windows7-x64

10

NEAS.bc724...JC.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    NEAS.bc724eba4a6deffb1d86906a3925f2e0_JC.exe

  • Size

    300KB

  • Sample

    231105-fn3fwada66

  • MD5

    bc724eba4a6deffb1d86906a3925f2e0

  • SHA1

    375f5de1db2954fd3f5af0fa2aa82a012e40e709

  • SHA256

    d0b5fcf188bdea84d950992e196d633240330a20df9294dd934ba903ed8de050

  • SHA512

    181b24d4fc6660838ef0ab96060eec1c31ca29b857e7988a2fd20a020821efe4168fcca086eb00f3981653d16bb3648550e6754b1e65876dd7b5863587ae400b

  • SSDEEP

    6144:SaYOGtJA4h2jvosK6mUzW0jAWRD2jvosK6mUzWh1T+/wPBfn8p:oOGA4hx67fLx67EZ+/CBfg

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.bc724eba4a6deffb1d86906a3925f2e0_JC.exe

    • Size

      300KB

    • MD5

      bc724eba4a6deffb1d86906a3925f2e0

    • SHA1

      375f5de1db2954fd3f5af0fa2aa82a012e40e709

    • SHA256

      d0b5fcf188bdea84d950992e196d633240330a20df9294dd934ba903ed8de050

    • SHA512

      181b24d4fc6660838ef0ab96060eec1c31ca29b857e7988a2fd20a020821efe4168fcca086eb00f3981653d16bb3648550e6754b1e65876dd7b5863587ae400b

    • SSDEEP

      6144:SaYOGtJA4h2jvosK6mUzW0jAWRD2jvosK6mUzWh1T+/wPBfn8p:oOGA4hx67fLx67EZ+/CBfg

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks