Overview

overview

10

Static

static

10

NEAS.6752f...JC.exe

windows7-x64

10

NEAS.6752f...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.6752fe2f28422aae124c983dcb37a0fe_JC.exe

  • Size

    404KB

  • Sample

    231105-sc5s3sfg4y

  • MD5

    6752fe2f28422aae124c983dcb37a0fe

  • SHA1

    bab01c41f3038fbf1f2eb65ff5bc40b1ae3930b6

  • SHA256

    0c308d6e266e5da7637e9347d566f09a23efb1800784881d325d09be45e72bf0

  • SHA512

    d6effc8d0411bf87b1f7073fb10d65ebc88a67cfb28e77a0ee675c11b66cb74bbadedde8535f99c04866c0011e46cb69b58d301c8a7b0dfe5689b9d38acc1ab7

  • SSDEEP

    6144:bWzQVBAJeu0pENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:beiqeGwcMpV6yYP4rbpV6yYPg058KS

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.6752fe2f28422aae124c983dcb37a0fe_JC.exe

    • Size

      404KB

    • MD5

      6752fe2f28422aae124c983dcb37a0fe

    • SHA1

      bab01c41f3038fbf1f2eb65ff5bc40b1ae3930b6

    • SHA256

      0c308d6e266e5da7637e9347d566f09a23efb1800784881d325d09be45e72bf0

    • SHA512

      d6effc8d0411bf87b1f7073fb10d65ebc88a67cfb28e77a0ee675c11b66cb74bbadedde8535f99c04866c0011e46cb69b58d301c8a7b0dfe5689b9d38acc1ab7

    • SSDEEP

      6144:bWzQVBAJeu0pENm+3Mpui6yYPaIGckfru5xyDpui6yYPaIGckSU05836S5:beiqeGwcMpV6yYP4rbpV6yYPg058KS

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks