Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.4fbd8...2e.exe

windows7-x64

10

NEAS.4fbd8...2e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.4fbd87cb80a483ead783feb2a358a92e.exe

  • Size

    141KB

  • Sample

    231031-kj3nasbh99

  • MD5

    4fbd87cb80a483ead783feb2a358a92e

  • SHA1

    3aa0c5ed7a36bea906b77a6566ef0be1a37b1552

  • SHA256

    bd513c4286f1cb434ccfa845b6efb15e5eb8e650d5fdb3c2c69181090a943160

  • SHA512

    93ec0d052628e5b6deccf8ff01eeae241e757d6731c5898cce671c70ff15e0935ba04a6850d58584ab998ddbe89f33f78539f7e6413e1a9360bbd7eedbdeac5e

  • SSDEEP

    3072:0lx7HUm7YAxdFzwQ9bGCmBJFWpoPSkGFj/p7sW0l:QN5suFzN9bGCKJFtE/JK

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.4fbd87cb80a483ead783feb2a358a92e.exe

    • Size

      141KB

    • MD5

      4fbd87cb80a483ead783feb2a358a92e

    • SHA1

      3aa0c5ed7a36bea906b77a6566ef0be1a37b1552

    • SHA256

      bd513c4286f1cb434ccfa845b6efb15e5eb8e650d5fdb3c2c69181090a943160

    • SHA512

      93ec0d052628e5b6deccf8ff01eeae241e757d6731c5898cce671c70ff15e0935ba04a6850d58584ab998ddbe89f33f78539f7e6413e1a9360bbd7eedbdeac5e

    • SSDEEP

      3072:0lx7HUm7YAxdFzwQ9bGCmBJFWpoPSkGFj/p7sW0l:QN5suFzN9bGCKJFtE/JK

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks