Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.db9bf...JC.exe

windows7-x64

10

NEAS.db9bf...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.db9bf12ceac5e99c1a9a7a80ebe8d480_JC.exe

  • Size

    123KB

  • Sample

    231023-t38s4aae2v

  • MD5

    db9bf12ceac5e99c1a9a7a80ebe8d480

  • SHA1

    adda3426902b2d0317385f92a6b12fdc781a4baa

  • SHA256

    c4ee050167e166fdf061e24f6c447037ac365477026648c342288b4d208bae94

  • SHA512

    44fe8e07b972c309564e2a8da060bb32019a42335afa7ca30736fb4690cee1a3d745ca2612b67287d42356c5b81d17d5f5dbfecd526fe7e13517bbb90d6ebdde

  • SSDEEP

    3072:ESfkQ6t8oTIN1jA8h3Pm0cTVWRYSa9rR85DEn5k7r8:3fkQ6trujZ9P+hW4rQD85k/8

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.db9bf12ceac5e99c1a9a7a80ebe8d480_JC.exe

    • Size

      123KB

    • MD5

      db9bf12ceac5e99c1a9a7a80ebe8d480

    • SHA1

      adda3426902b2d0317385f92a6b12fdc781a4baa

    • SHA256

      c4ee050167e166fdf061e24f6c447037ac365477026648c342288b4d208bae94

    • SHA512

      44fe8e07b972c309564e2a8da060bb32019a42335afa7ca30736fb4690cee1a3d745ca2612b67287d42356c5b81d17d5f5dbfecd526fe7e13517bbb90d6ebdde

    • SSDEEP

      3072:ESfkQ6t8oTIN1jA8h3Pm0cTVWRYSa9rR85DEn5k7r8:3fkQ6trujZ9P+hW4rQD85k/8

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks