Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f214c...JC.exe

windows7-x64

10

NEAS.f214c...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f214c8dc49c6480ede84a736732a7a40_JC.exe

  • Size

    130KB

  • Sample

    231023-2ngeasgf7y

  • MD5

    f214c8dc49c6480ede84a736732a7a40

  • SHA1

    d4c72d7a18673a75ef2271290e9432d275c93537

  • SHA256

    4347c68b02121b8a0f919b201d69f48d81cb4956adc456eacc30bb55a509e136

  • SHA512

    c5d3caebf2a2b9d28db2adf39060d0d48062c41c2860893eb4fb665dbc2c94b8cb8b468b606eaa58d8517f77d59299eb03e911d0b8d25c48d56e8383b24647fe

  • SSDEEP

    3072:2MWqat3iG22/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:2Hqc3iB4BhHmNEcYj9nhV8NCV

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f214c8dc49c6480ede84a736732a7a40_JC.exe

    • Size

      130KB

    • MD5

      f214c8dc49c6480ede84a736732a7a40

    • SHA1

      d4c72d7a18673a75ef2271290e9432d275c93537

    • SHA256

      4347c68b02121b8a0f919b201d69f48d81cb4956adc456eacc30bb55a509e136

    • SHA512

      c5d3caebf2a2b9d28db2adf39060d0d48062c41c2860893eb4fb665dbc2c94b8cb8b468b606eaa58d8517f77d59299eb03e911d0b8d25c48d56e8383b24647fe

    • SSDEEP

      3072:2MWqat3iG22/BhHmiImXJ2fYdV46nfPyxWhj8NCM/4:2Hqc3iB4BhHmNEcYj9nhV8NCV

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks