Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.85919584f399b82c5b95dd967650fa8b.exe

  • Size

    143KB

  • Sample

    231031-kkchhaaa5t

  • MD5

    85919584f399b82c5b95dd967650fa8b

  • SHA1

    1f47f4388c82f5bb98b1ae549f5a4931f545f659

  • SHA256

    f4ce13ebaabd7dab3a45090b6b16467c9c96c7b647bab9c361bec5c98d25cb7d

  • SHA512

    966527b4e0e9e1d629aea4f48ba3f5b574047c3e0d510f8b6a1c00d808ac465e691e4b7bf802d091a5acdef8ff7b439d328ec72ee93580b3024fd1bf2eda01c0

  • SSDEEP

    3072:IMAclrEQaAlp6OfeNo3N93bsGfhv0vt3y:YczFfIo3vLsGZv0vti

Malware Config

Targets

    • Target

      NEAS.85919584f399b82c5b95dd967650fa8b.exe

    • Size

      143KB

    • MD5

      85919584f399b82c5b95dd967650fa8b

    • SHA1

      1f47f4388c82f5bb98b1ae549f5a4931f545f659

    • SHA256

      f4ce13ebaabd7dab3a45090b6b16467c9c96c7b647bab9c361bec5c98d25cb7d

    • SHA512

      966527b4e0e9e1d629aea4f48ba3f5b574047c3e0d510f8b6a1c00d808ac465e691e4b7bf802d091a5acdef8ff7b439d328ec72ee93580b3024fd1bf2eda01c0

    • SSDEEP

      3072:IMAclrEQaAlp6OfeNo3N93bsGfhv0vt3y:YczFfIo3vLsGZv0vti

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.