Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.eca9d...a0.exe

windows7-x64

10

NEAS.eca9d...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.eca9d072fc3f6c60281d0755a660a4a0.exe

  • Size

    302KB

  • Sample

    231028-y25r9sce6z

  • MD5

    eca9d072fc3f6c60281d0755a660a4a0

  • SHA1

    3631bc57d1a843950cd149aadc6f1d64ed4ea60f

  • SHA256

    5defb70f886b59081b859835372037effb12750eb7f82476e065376eeeef9cda

  • SHA512

    542b212910cf75b29b0feefb5392f82b730a3a4ed1a2f48714f1cb56a2eaf107e406dd3a0503f80b0d88f5381d0080feb7ce9ed704929698974cd14e62134523

  • SSDEEP

    6144:HkgkkY5GadL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:H5Y5Gkv8lXhuT9XvEhdfEmwlY1

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.eca9d072fc3f6c60281d0755a660a4a0.exe

    • Size

      302KB

    • MD5

      eca9d072fc3f6c60281d0755a660a4a0

    • SHA1

      3631bc57d1a843950cd149aadc6f1d64ed4ea60f

    • SHA256

      5defb70f886b59081b859835372037effb12750eb7f82476e065376eeeef9cda

    • SHA512

      542b212910cf75b29b0feefb5392f82b730a3a4ed1a2f48714f1cb56a2eaf107e406dd3a0503f80b0d88f5381d0080feb7ce9ed704929698974cd14e62134523

    • SSDEEP

      6144:HkgkkY5GadL7GNlighD4lTjZXvEQo9dfEORRAgnIlY1:H5Y5Gkv8lXhuT9XvEhdfEmwlY1

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks