Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.21c6a...80.exe

windows7-x64

10

NEAS.21c6a...80.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.21c6a0b4d514b9527bf2cdbb59639a80.exe

  • Size

    89KB

  • Sample

    231028-wnp4jsfg67

  • MD5

    21c6a0b4d514b9527bf2cdbb59639a80

  • SHA1

    72a93ba3a81147d522c40805ebda1abe3893bac3

  • SHA256

    c3ce105ee3b7ef8dde5871d15dbedcd29a572e8cceba94e3a3a1e17faf76540b

  • SHA512

    35e9aff6a6b116e0cf4bdd08f5a6aaa07fb433039e4465d0e35b6798542d09ba8b792668ec6cdf342a94964bd1cf818adb6327de605302ebd5fd6ce2ff611f67

  • SSDEEP

    1536:HPIdWGB3bGVMR/Ue/eBRyJKcLsXutu+JIqRQYND68a+VMKKTRVGFtUhQfR1WRaRR:vGyVJe/eKAcL9tKqehr4MKy3G7UEqMM6

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.21c6a0b4d514b9527bf2cdbb59639a80.exe

    • Size

      89KB

    • MD5

      21c6a0b4d514b9527bf2cdbb59639a80

    • SHA1

      72a93ba3a81147d522c40805ebda1abe3893bac3

    • SHA256

      c3ce105ee3b7ef8dde5871d15dbedcd29a572e8cceba94e3a3a1e17faf76540b

    • SHA512

      35e9aff6a6b116e0cf4bdd08f5a6aaa07fb433039e4465d0e35b6798542d09ba8b792668ec6cdf342a94964bd1cf818adb6327de605302ebd5fd6ce2ff611f67

    • SSDEEP

      1536:HPIdWGB3bGVMR/Ue/eBRyJKcLsXutu+JIqRQYND68a+VMKKTRVGFtUhQfR1WRaRR:vGyVJe/eKAcL9tKqehr4MKy3G7UEqMM6

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks