Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.0c3ed...80.exe

windows7-x64

10

NEAS.0c3ed...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0c3ed27671ab753d46b3a066d002cf80.exe

  • Size

    664KB

  • Sample

    231028-wmprdsde6s

  • MD5

    0c3ed27671ab753d46b3a066d002cf80

  • SHA1

    a755d6e94fdb285ccf21768d9f434ff2fc095b7a

  • SHA256

    d696feefc2d8bdd4f99e3e7da2c502e911ddf96e7b57d2b4de61a4938f2de8f0

  • SHA512

    428378dde1183cff601bf1dd40b7dd246bc89782e160825c1624a757cae564615bbdcf9a6617841e6160421c3183e639d8382538bc8956d23de2b2b4abaa197c

  • SSDEEP

    12288:5QHdECpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:5QHbW4XWleKWNUir2MhNl6zX3w9As/xi

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0c3ed27671ab753d46b3a066d002cf80.exe

    • Size

      664KB

    • MD5

      0c3ed27671ab753d46b3a066d002cf80

    • SHA1

      a755d6e94fdb285ccf21768d9f434ff2fc095b7a

    • SHA256

      d696feefc2d8bdd4f99e3e7da2c502e911ddf96e7b57d2b4de61a4938f2de8f0

    • SHA512

      428378dde1183cff601bf1dd40b7dd246bc89782e160825c1624a757cae564615bbdcf9a6617841e6160421c3183e639d8382538bc8956d23de2b2b4abaa197c

    • SSDEEP

      12288:5QHdECpV6yYP4rbpV6yYPg058KpV6yYPNUir2MhNl6zX3w9As/xO23WM6tJmDYjF:5QHbW4XWleKWNUir2MhNl6zX3w9As/xi

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks