Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.d25a1fcc9bef2fef4b749e8c0fcf1900.exe
-
Size
197KB
-
Sample
231022-v2ez3ahb31
-
MD5
d25a1fcc9bef2fef4b749e8c0fcf1900
-
SHA1
3c0fe8b9bece46ac0e3bdf280667e582ea8d90b3
-
SHA256
4ea81d96610dc0e2e0791c1678b946120bd950507e9346578c2d9e1baa0bdba1
-
SHA512
621be55f53490b476c04076f512c019e684109542dbece9135e001d6c5836d20a9f184a3922eb6b9ccbae3eee4545b6554cc994d83318982d8a9b45d61a0769c
-
SSDEEP
6144:MWKaQx4ug4fQkjxqvak+PH/RARMHGb3fJt4X:MWKWD4IyxqCfRARR6
Behavioral task
behavioral1
Sample
NEAS.d25a1fcc9bef2fef4b749e8c0fcf1900.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
NEAS.d25a1fcc9bef2fef4b749e8c0fcf1900.exe
Resource
win10v2004-20231020-en
Malware Config
Targets
-
-
Target
NEAS.d25a1fcc9bef2fef4b749e8c0fcf1900.exe
-
Size
197KB
-
MD5
d25a1fcc9bef2fef4b749e8c0fcf1900
-
SHA1
3c0fe8b9bece46ac0e3bdf280667e582ea8d90b3
-
SHA256
4ea81d96610dc0e2e0791c1678b946120bd950507e9346578c2d9e1baa0bdba1
-
SHA512
621be55f53490b476c04076f512c019e684109542dbece9135e001d6c5836d20a9f184a3922eb6b9ccbae3eee4545b6554cc994d83318982d8a9b45d61a0769c
-
SSDEEP
6144:MWKaQx4ug4fQkjxqvak+PH/RARMHGb3fJt4X:MWKWD4IyxqCfRARR6
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Malware Backdoor - Berbew
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-