Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.fdff4...JC.exe

windows7-x64

10

NEAS.fdff4...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.fdff4a3e1ea2d6cc0794389e52754a6d_JC.exe

  • Size

    368KB

  • Sample

    231022-st2gzscb35

  • MD5

    fdff4a3e1ea2d6cc0794389e52754a6d

  • SHA1

    fc619d45f8c3fe6c2c5a82ad1ed9bed82e80df37

  • SHA256

    94f8c9e6fc5ed3bd87ee82dca1190abf052a10b73e05c2fa941694f00675991f

  • SHA512

    085b617bd2ee1773b0948694bd3e55ef229d89b2f0947f243b22e83b91dafe6d0b3bc04ec495a65acc5622c62df8cedd03b1e17969fd42125f7e94f7b95f8f76

  • SSDEEP

    6144:/74fKaJbVxrE44ME4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJe:zY7I4YaAD6RrI1+lDMEAD6Rr2NWL

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.fdff4a3e1ea2d6cc0794389e52754a6d_JC.exe

    • Size

      368KB

    • MD5

      fdff4a3e1ea2d6cc0794389e52754a6d

    • SHA1

      fc619d45f8c3fe6c2c5a82ad1ed9bed82e80df37

    • SHA256

      94f8c9e6fc5ed3bd87ee82dca1190abf052a10b73e05c2fa941694f00675991f

    • SHA512

      085b617bd2ee1773b0948694bd3e55ef229d89b2f0947f243b22e83b91dafe6d0b3bc04ec495a65acc5622c62df8cedd03b1e17969fd42125f7e94f7b95f8f76

    • SSDEEP

      6144:/74fKaJbVxrE44ME4f9FIUpOVw86CmOJfTo9FIUIhrcflDMxy9FIUpOVw86CmOJe:zY7I4YaAD6RrI1+lDMEAD6Rr2NWL

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks