Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.f7e12...50.exe

windows7-x64

10

NEAS.f7e12...50.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.f7e121334d9fa434c92d85101639b450.exe

  • Size

    199KB

  • Sample

    231028-y3wkzsda5z

  • MD5

    f7e121334d9fa434c92d85101639b450

  • SHA1

    3d9dbdd55985ee8df1b44881344076391e1605c1

  • SHA256

    4c04afc16f14955fb526f001de34f6198727fb7f00cd3425314129fc4d139857

  • SHA512

    1c64001611da8d9a9f7cd9d889b55c9b27ab7a8590f7ba4ed9ecee4daf02a22a12548deda7abd23fb855ab0387693fb6891692bff670b44fb990cf1a1babebe1

  • SSDEEP

    3072:GRFPlPWNMrUZS5DSCopsIm81+jq2832dp5Xp+7+10K03Rq/ghavVQXxFaPsRbh:knr+SZSCZj81+jq4peBK034YOmFz1h

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.f7e121334d9fa434c92d85101639b450.exe

    • Size

      199KB

    • MD5

      f7e121334d9fa434c92d85101639b450

    • SHA1

      3d9dbdd55985ee8df1b44881344076391e1605c1

    • SHA256

      4c04afc16f14955fb526f001de34f6198727fb7f00cd3425314129fc4d139857

    • SHA512

      1c64001611da8d9a9f7cd9d889b55c9b27ab7a8590f7ba4ed9ecee4daf02a22a12548deda7abd23fb855ab0387693fb6891692bff670b44fb990cf1a1babebe1

    • SSDEEP

      3072:GRFPlPWNMrUZS5DSCopsIm81+jq2832dp5Xp+7+10K03Rq/ghavVQXxFaPsRbh:knr+SZSCZj81+jq4peBK034YOmFz1h

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks