Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.e30bc...40.exe

windows7-x64

10

NEAS.e30bc...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.e30bc0ce8448e9dc0dfca1f034e3df40.exe

  • Size

    445KB

  • Sample

    231031-kx44aaef2z

  • MD5

    e30bc0ce8448e9dc0dfca1f034e3df40

  • SHA1

    4e2a4d0a5fa5a49df0f5303c511b3c42ba3116ca

  • SHA256

    0cf6dd8a04aaa0403abce2076e8d9af43bac1a212c4f7df61fb885089ee8a2cb

  • SHA512

    4c5a6dfbcba1e203666b34f95472af19e3da26edc296f3085c976549b3cb10ea01b97d6fbad1f4c838ed7f7f1d85009c14dcdcb258ff66c1d34a38d74a84443c

  • SSDEEP

    12288:uBIjUzpV6yYPMLnfBJKFbhDwBpV6yYP0riuoCgNbbko8JfSIuMUb1V4D0:uBIjUzWMLnfBJKhVwBW0riuoCgNbbj8k

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.e30bc0ce8448e9dc0dfca1f034e3df40.exe

    • Size

      445KB

    • MD5

      e30bc0ce8448e9dc0dfca1f034e3df40

    • SHA1

      4e2a4d0a5fa5a49df0f5303c511b3c42ba3116ca

    • SHA256

      0cf6dd8a04aaa0403abce2076e8d9af43bac1a212c4f7df61fb885089ee8a2cb

    • SHA512

      4c5a6dfbcba1e203666b34f95472af19e3da26edc296f3085c976549b3cb10ea01b97d6fbad1f4c838ed7f7f1d85009c14dcdcb258ff66c1d34a38d74a84443c

    • SSDEEP

      12288:uBIjUzpV6yYPMLnfBJKFbhDwBpV6yYP0riuoCgNbbko8JfSIuMUb1V4D0:uBIjUzWMLnfBJKhVwBW0riuoCgNbbj8k

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks