Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.51ef8...21.exe

windows7-x64

10

NEAS.51ef8...21.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.51ef8736815f79fc519feba984f6d421.exe

  • Size

    153KB

  • Sample

    231031-kj3nashh2z

  • MD5

    51ef8736815f79fc519feba984f6d421

  • SHA1

    4736eee065241fc7b21c34f60433d1dbf33a5d5d

  • SHA256

    2809b164b6b0a8d01c6dadd8395dc6205d730ef9e9067cb3a1e4742c9be5f245

  • SHA512

    3f38c81d82ea0482f518aa013700bd3075c358eb4cd7f81b021bee2a2ad2fec174b143e536547b925a3a129cc991351f1caa9a56240a8e8f1d14ffbfb6bce71d

  • SSDEEP

    3072:Y1TIOi7VGlSgM7RlUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:Y1MrWSgM7RWAHj05xP3DZyN1eRppzceh

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.51ef8736815f79fc519feba984f6d421.exe

    • Size

      153KB

    • MD5

      51ef8736815f79fc519feba984f6d421

    • SHA1

      4736eee065241fc7b21c34f60433d1dbf33a5d5d

    • SHA256

      2809b164b6b0a8d01c6dadd8395dc6205d730ef9e9067cb3a1e4742c9be5f245

    • SHA512

      3f38c81d82ea0482f518aa013700bd3075c358eb4cd7f81b021bee2a2ad2fec174b143e536547b925a3a129cc991351f1caa9a56240a8e8f1d14ffbfb6bce71d

    • SSDEEP

      3072:Y1TIOi7VGlSgM7RlUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:Y1MrWSgM7RWAHj05xP3DZyN1eRppzceh

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks