Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.0cd2a...c0.exe

windows7-x64

10

NEAS.0cd2a...c0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.0cd2a7b38b2800bfb61957083780f5c0.exe

  • Size

    75KB

  • Sample

    231028-wmqnpafb98

  • MD5

    0cd2a7b38b2800bfb61957083780f5c0

  • SHA1

    496f6f33f2f571ddaf9416e0b9e332c5d8b9026a

  • SHA256

    e45b82f465d8acb17931f4cf4d289fcf10609e4526290122805555bdff88390f

  • SHA512

    ae205ddc43fb5dd85a5aaf049adc1143b3e8cc8b861cd35eca68c3e35ef365734666d9e7644fc89a96beb27ec017d731d84c6e939551220d265ce8378d39829b

  • SSDEEP

    1536:nRRVv0VA9+5iG/NmR259OtFzO53q52IrFH:Rrs+9+5iGcR259OtFzg3qv

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.0cd2a7b38b2800bfb61957083780f5c0.exe

    • Size

      75KB

    • MD5

      0cd2a7b38b2800bfb61957083780f5c0

    • SHA1

      496f6f33f2f571ddaf9416e0b9e332c5d8b9026a

    • SHA256

      e45b82f465d8acb17931f4cf4d289fcf10609e4526290122805555bdff88390f

    • SHA512

      ae205ddc43fb5dd85a5aaf049adc1143b3e8cc8b861cd35eca68c3e35ef365734666d9e7644fc89a96beb27ec017d731d84c6e939551220d265ce8378d39829b

    • SSDEEP

      1536:nRRVv0VA9+5iG/NmR259OtFzO53q52IrFH:Rrs+9+5iGcR259OtFzg3qv

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks