Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f8895...JC.exe

windows7-x64

10

NEAS.f8895...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f889564101cdc45a55a189821bee1a0c_JC.exe

  • Size

    378KB

  • Sample

    231023-yahhnafd93

  • MD5

    f889564101cdc45a55a189821bee1a0c

  • SHA1

    af1f621198563fa6494ab1a90c8457a5c69ebe4c

  • SHA256

    3974c97d60b02871eed9db752876f336fb5f0b50f3819c81de8177dd63eae234

  • SHA512

    b21c30693d2b176aef77238716278e09d949b65d2517fe8d6651dbd5ae971e5c41e09edba7ecd1c6709948d228837f26a675eef87651a904a2a0ce25494d2018

  • SSDEEP

    6144:ZWa8Y/vlELeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:1vGLeYr75lTefkY660fIaDZkY660f2lO

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f889564101cdc45a55a189821bee1a0c_JC.exe

    • Size

      378KB

    • MD5

      f889564101cdc45a55a189821bee1a0c

    • SHA1

      af1f621198563fa6494ab1a90c8457a5c69ebe4c

    • SHA256

      3974c97d60b02871eed9db752876f336fb5f0b50f3819c81de8177dd63eae234

    • SHA512

      b21c30693d2b176aef77238716278e09d949b65d2517fe8d6651dbd5ae971e5c41e09edba7ecd1c6709948d228837f26a675eef87651a904a2a0ce25494d2018

    • SSDEEP

      6144:ZWa8Y/vlELeYr75lHzpaF2e6UK+42GTQMJSZO5f7M0rx7/hP66qve6UK+42GTQM1:1vGLeYr75lTefkY660fIaDZkY660f2lO

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks