Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.3c300f089788f5a76501c83ba32b3f70.exe

  • Size

    123KB

  • Sample

    231028-ylvblagg98

  • MD5

    3c300f089788f5a76501c83ba32b3f70

  • SHA1

    6e25141c24f67cdceb5ea05a0e14baf3106583fa

  • SHA256

    6c294c211510817a26e793c7368370ab1166a035b3097c278be1c5c8d52dcb66

  • SHA512

    b1d209ddbb08b459116b19751a8b54bf406d2dc5cf0ef635f3e8c9f463c295e2415ec876f76b8ba6d899fb123ef37d1b3b8ecafb0f4e68924596791fa3a51b1f

  • SSDEEP

    1536:FsuPZsq7KrrNWiC/xEzDJj7xaRMsGcjRYSw1mir8CAjXoiDEuGg0opGCR98:XberBoxITEjRYSa9rR85DEn5k7r8

Malware Config

Targets

    • Target

      NEAS.3c300f089788f5a76501c83ba32b3f70.exe

    • Size

      123KB

    • MD5

      3c300f089788f5a76501c83ba32b3f70

    • SHA1

      6e25141c24f67cdceb5ea05a0e14baf3106583fa

    • SHA256

      6c294c211510817a26e793c7368370ab1166a035b3097c278be1c5c8d52dcb66

    • SHA512

      b1d209ddbb08b459116b19751a8b54bf406d2dc5cf0ef635f3e8c9f463c295e2415ec876f76b8ba6d899fb123ef37d1b3b8ecafb0f4e68924596791fa3a51b1f

    • SSDEEP

      1536:FsuPZsq7KrrNWiC/xEzDJj7xaRMsGcjRYSw1mir8CAjXoiDEuGg0opGCR98:XberBoxITEjRYSa9rR85DEn5k7r8

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks