Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.d3977ab1d0a3c11cafcd5004485eda60_JC.exe
-
Size
226KB
-
Sample
231022-rjn88sbc97
-
MD5
d3977ab1d0a3c11cafcd5004485eda60
-
SHA1
3179384c14b3d0db9ab6c488b22dec4830794a4e
-
SHA256
66b54872c886df7e842083d5a1a5e92b5bbeb3dd73e8608cf12be2e31d409216
-
SHA512
0b43eee3aa4a4bb52d58f017b58b000fdc101121e1bb661c510c4cbeba448ae8ba583a72da1fb42b47e5413717e85fc1e0bcc0d0ff25a053c1051e8451cc3c5e
-
SSDEEP
6144:0qZd0JrIhiRXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:0iiJ0I5IKrEAlnLAg
Behavioral task
behavioral1
Sample
NEAS.d3977ab1d0a3c11cafcd5004485eda60_JC.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d3977ab1d0a3c11cafcd5004485eda60_JC.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.d3977ab1d0a3c11cafcd5004485eda60_JC.exe
-
Size
226KB
-
MD5
d3977ab1d0a3c11cafcd5004485eda60
-
SHA1
3179384c14b3d0db9ab6c488b22dec4830794a4e
-
SHA256
66b54872c886df7e842083d5a1a5e92b5bbeb3dd73e8608cf12be2e31d409216
-
SHA512
0b43eee3aa4a4bb52d58f017b58b000fdc101121e1bb661c510c4cbeba448ae8ba583a72da1fb42b47e5413717e85fc1e0bcc0d0ff25a053c1051e8451cc3c5e
-
SSDEEP
6144:0qZd0JrIhiRXfxqySSKpRmSKeTk7eT5ABrnL8MdYg:0iiJ0I5IKrEAlnLAg
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Malware Backdoor - Berbew
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-