Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.eb086...f0.exe

windows7-x64

10

NEAS.eb086...f0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.eb086d45f528914ae6c06dc752cc79f0.exe

  • Size

    378KB

  • Sample

    231021-1f5lgsda37

  • MD5

    eb086d45f528914ae6c06dc752cc79f0

  • SHA1

    bbab7a08282120e4d6dc779471243a1c97b269fa

  • SHA256

    25f92833e21e3c751bb3c087c01835030e6b20edff14e964b93046944cab9a17

  • SHA512

    a93c2ca1fed7fe690dae8b98fc446dd57b9f8d54facbcdf7a54712d666ca1da98653edf535f20f741b0d19acbab298e7dbac651378f828faf5b14d64c3c537e7

  • SSDEEP

    6144:9q7FQhEgn1EgeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:cBQhEgnGgeYr75lTefkY660fIaDZkY61

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.eb086d45f528914ae6c06dc752cc79f0.exe

    • Size

      378KB

    • MD5

      eb086d45f528914ae6c06dc752cc79f0

    • SHA1

      bbab7a08282120e4d6dc779471243a1c97b269fa

    • SHA256

      25f92833e21e3c751bb3c087c01835030e6b20edff14e964b93046944cab9a17

    • SHA512

      a93c2ca1fed7fe690dae8b98fc446dd57b9f8d54facbcdf7a54712d666ca1da98653edf535f20f741b0d19acbab298e7dbac651378f828faf5b14d64c3c537e7

    • SSDEEP

      6144:9q7FQhEgn1EgeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GT9:cBQhEgnGgeYr75lTefkY660fIaDZkY61

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks