Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.4e131...a0.exe

windows7-x64

10

NEAS.4e131...a0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4e131bbf4faf5b89c1e60dad149650a0.exe

  • Size

    451KB

  • Sample

    231028-ymdegahc32

  • MD5

    4e131bbf4faf5b89c1e60dad149650a0

  • SHA1

    01c55402655c7130f2628a00cf50da3581426f08

  • SHA256

    060595a594a72d2c9b7597c029c14f917f66a9249cb4e9bd0d33132a0858bd52

  • SHA512

    f3870a46b6be121021b302903c80642ca48863a87013350ed7e219108fb227f9883aabbdde2ba1658721e84bb6b4852ff4ad02e72bdb015c6e9f9b9aa3d7ff31

  • SSDEEP

    6144:HJs4fUFCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58VU5tT:ps0Otoq5t6NSN6G5tbt5t6NSN6G5t

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4e131bbf4faf5b89c1e60dad149650a0.exe

    • Size

      451KB

    • MD5

      4e131bbf4faf5b89c1e60dad149650a0

    • SHA1

      01c55402655c7130f2628a00cf50da3581426f08

    • SHA256

      060595a594a72d2c9b7597c029c14f917f66a9249cb4e9bd0d33132a0858bd52

    • SHA512

      f3870a46b6be121021b302903c80642ca48863a87013350ed7e219108fb227f9883aabbdde2ba1658721e84bb6b4852ff4ad02e72bdb015c6e9f9b9aa3d7ff31

    • SSDEEP

      6144:HJs4fUFCN9Otopg5tTDUZNSN58VU5tTvnVn5tTDUZNSN58VU5tT:ps0Otoq5t6NSN6G5tbt5t6NSN6G5t

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks