Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.2b920...JC.exe

windows7-x64

10

NEAS.2b920...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2b920f617b9814f34963af4528d8d830_JC.exe

  • Size

    153KB

  • Sample

    231031-wsl8fscc2z

  • MD5

    2b920f617b9814f34963af4528d8d830

  • SHA1

    0846606ed77bf74fa80fe8ec84e81e9e3fde5346

  • SHA256

    fc1c405d2192dd9e45b41dde4871032acf9fb671d53ddfd9ece383a841b12809

  • SHA512

    98fa5c50ce9f1b366d52807f2ba00379a638675e3e78df5232a5d93814e0f6a45db3b88cbc4ba44ffb89e09a6657b5df6d3b80aa2377c5ec8b5f7d1ecaea474a

  • SSDEEP

    3072:au7rvxXsL50JaPNYeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:La9aaqdAHj05xP3DZyN1eRppzcexn

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.2b920f617b9814f34963af4528d8d830_JC.exe

    • Size

      153KB

    • MD5

      2b920f617b9814f34963af4528d8d830

    • SHA1

      0846606ed77bf74fa80fe8ec84e81e9e3fde5346

    • SHA256

      fc1c405d2192dd9e45b41dde4871032acf9fb671d53ddfd9ece383a841b12809

    • SHA512

      98fa5c50ce9f1b366d52807f2ba00379a638675e3e78df5232a5d93814e0f6a45db3b88cbc4ba44ffb89e09a6657b5df6d3b80aa2377c5ec8b5f7d1ecaea474a

    • SSDEEP

      3072:au7rvxXsL50JaPNYeUAEQGBcHN0OlaxP3DZyN/+oeRpxPdZFibDyxn:La9aaqdAHj05xP3DZyN1eRppzcexn

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks