Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.c0941...d0.exe

windows7-x64

10

NEAS.c0941...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c0941a9afb9cb2598fa10ea8c8b1bbd0.exe

  • Size

    109KB

  • Sample

    231028-yy8dzsae3t

  • MD5

    c0941a9afb9cb2598fa10ea8c8b1bbd0

  • SHA1

    6831f316b82e1e9d58ba81bc904d4fa4aa269d91

  • SHA256

    877ec6c0b276795fa948987d60567e5bba422db3b1117fd8907a43de50b989ca

  • SHA512

    da491b9e30117b1bffcbb4db21ec68b1fb48ea398f514559c88135501d93a3320b1370e4b941eff6cc1d678e079d541805270d26d7942438341d605720de584e

  • SSDEEP

    3072:/GljNy/QJF7q4dwjJ9aLCqwzBu1DjHLMVDqqkSpR:+lY4rd+J9uwtu1DjrFqhz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c0941a9afb9cb2598fa10ea8c8b1bbd0.exe

    • Size

      109KB

    • MD5

      c0941a9afb9cb2598fa10ea8c8b1bbd0

    • SHA1

      6831f316b82e1e9d58ba81bc904d4fa4aa269d91

    • SHA256

      877ec6c0b276795fa948987d60567e5bba422db3b1117fd8907a43de50b989ca

    • SHA512

      da491b9e30117b1bffcbb4db21ec68b1fb48ea398f514559c88135501d93a3320b1370e4b941eff6cc1d678e079d541805270d26d7942438341d605720de584e

    • SSDEEP

      3072:/GljNy/QJF7q4dwjJ9aLCqwzBu1DjHLMVDqqkSpR:+lY4rd+J9uwtu1DjrFqhz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks