Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.f214c8dc49c6480ede84a736732a7a40_JC.exe

  • Size

    130KB

  • Sample

    231023-2ngeasgf7y

  • MD5

    f214c8dc49c6480ede84a736732a7a40

  • SHA1

    d4c72d7a18673a75ef2271290e9432d275c93537

  • SHA256

    4347c68b02121b8a0f919b201d69f48d81cb4956adc456eacc30bb55a509e136

  • SHA512

    c5d3caebf2a2b9d28db2adf39060d0d48062c41c2860893eb4fb665dbc2c94b8cb8b468b606eaa58d8517f77d59299eb03e911d0b8d25c48d56e8383b24647fe

  • SSDEEP

    3072:2MWqat3iG22/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:2Hqc3iB4BhHmNEcYj9nhV8NCV

Malware Config

Targets

    • Target

      NEAS.f214c8dc49c6480ede84a736732a7a40_JC.exe

    • Size

      130KB

    • MD5

      f214c8dc49c6480ede84a736732a7a40

    • SHA1

      d4c72d7a18673a75ef2271290e9432d275c93537

    • SHA256

      4347c68b02121b8a0f919b201d69f48d81cb4956adc456eacc30bb55a509e136

    • SHA512

      c5d3caebf2a2b9d28db2adf39060d0d48062c41c2860893eb4fb665dbc2c94b8cb8b468b606eaa58d8517f77d59299eb03e911d0b8d25c48d56e8383b24647fe

    • SSDEEP

      3072:2MWqat3iG22/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:2Hqc3iB4BhHmNEcYj9nhV8NCV

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.