Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.2b920f617b9814f34963af4528d8d830_JC.exe

  • Size

    153KB

  • Sample

    231031-wsl8fscc2z

  • MD5

    2b920f617b9814f34963af4528d8d830

  • SHA1

    0846606ed77bf74fa80fe8ec84e81e9e3fde5346

  • SHA256

    fc1c405d2192dd9e45b41dde4871032acf9fb671d53ddfd9ece383a841b12809

  • SHA512

    98fa5c50ce9f1b366d52807f2ba00379a638675e3e78df5232a5d93814e0f6a45db3b88cbc4ba44ffb89e09a6657b5df6d3b80aa2377c5ec8b5f7d1ecaea474a

  • SSDEEP

    3072:au7rvxXsL50JaPNYeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:La9aaqdAHj05xP3DZyN1eRppzcexn

Malware Config

Targets

    • Target

      NEAS.2b920f617b9814f34963af4528d8d830_JC.exe

    • Size

      153KB

    • MD5

      2b920f617b9814f34963af4528d8d830

    • SHA1

      0846606ed77bf74fa80fe8ec84e81e9e3fde5346

    • SHA256

      fc1c405d2192dd9e45b41dde4871032acf9fb671d53ddfd9ece383a841b12809

    • SHA512

      98fa5c50ce9f1b366d52807f2ba00379a638675e3e78df5232a5d93814e0f6a45db3b88cbc4ba44ffb89e09a6657b5df6d3b80aa2377c5ec8b5f7d1ecaea474a

    • SSDEEP

      3072:au7rvxXsL50JaPNYeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:La9aaqdAHj05xP3DZyN1eRppzcexn

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks