Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.dc220...40.exe

windows7-x64

10

NEAS.dc220...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.dc22005773f7f1d76889c8feaa12e640.exe

  • Size

    367KB

  • Sample

    231022-v25wgshf3y

  • MD5

    dc22005773f7f1d76889c8feaa12e640

  • SHA1

    8090b13655e793e2c50643302b6b53b55a144ae5

  • SHA256

    70e3a42b169567f098f37726468261b37a3203cb335b77939df28c6ac1c9c653

  • SHA512

    d2b2bed0ed76ee081d0d5b8b8c65834e6b63185875e4a617667a8de4b1d3c397df6a8fd8202fc202fcd1e52f2a0a97bdc82cfc1dfab725468df655029e218849

  • SSDEEP

    6144:8chgSAJ6YwtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:8chgSfFtJCXqP77D7FB24lwR45FB24lX

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.dc22005773f7f1d76889c8feaa12e640.exe

    • Size

      367KB

    • MD5

      dc22005773f7f1d76889c8feaa12e640

    • SHA1

      8090b13655e793e2c50643302b6b53b55a144ae5

    • SHA256

      70e3a42b169567f098f37726468261b37a3203cb335b77939df28c6ac1c9c653

    • SHA512

      d2b2bed0ed76ee081d0d5b8b8c65834e6b63185875e4a617667a8de4b1d3c397df6a8fd8202fc202fcd1e52f2a0a97bdc82cfc1dfab725468df655029e218849

    • SSDEEP

      6144:8chgSAJ6YwtnJfKXqPTX7D7FM6234lKm3mo8Yvi4KsLTFM6234lKm3cM9:8chgSfFtJCXqP77D7FB24lwR45FB24lX

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks