Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.46c11...a0.exe

windows7-x64

10

NEAS.46c11...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.46c11c5ac8c550c05bdf14211b5fe3a0.exe

  • Size

    176KB

  • Sample

    231022-vvlh9sda8s

  • MD5

    46c11c5ac8c550c05bdf14211b5fe3a0

  • SHA1

    63a43f3340c8cf3b9a9388932afa45d97031840c

  • SHA256

    72aae504d785449cc96d73eba4ded262c9c8459e35cbd59d509d1a83897a3369

  • SHA512

    88889d55987419236f9d9355bb77ec5537c1729dacfeb276fd9660b0c0b034bc7dcb2f859722326198f6690a42f3132099414f0226c3ddec293361e65c17f7ba

  • SSDEEP

    3072:xAw/IMYd5xIFgo1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:xAZMYdkFgo1nTZ9EaUn4yjK99QQd

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.46c11c5ac8c550c05bdf14211b5fe3a0.exe

    • Size

      176KB

    • MD5

      46c11c5ac8c550c05bdf14211b5fe3a0

    • SHA1

      63a43f3340c8cf3b9a9388932afa45d97031840c

    • SHA256

      72aae504d785449cc96d73eba4ded262c9c8459e35cbd59d509d1a83897a3369

    • SHA512

      88889d55987419236f9d9355bb77ec5537c1729dacfeb276fd9660b0c0b034bc7dcb2f859722326198f6690a42f3132099414f0226c3ddec293361e65c17f7ba

    • SSDEEP

      3072:xAw/IMYd5xIFgo1cjENRZ9wmAOIayGsOOJF4EISi/i4gG4npAjmA39QQIckJI:xAZMYdkFgo1nTZ9EaUn4yjK99QQd

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks