Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.2f31f...40.exe

windows7-x64

10

NEAS.2f31f...40.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.2f31f8ddb715c00ef3cf63a052f45240.exe

  • Size

    240KB

  • Sample

    231101-hw8zqseb63

  • MD5

    2f31f8ddb715c00ef3cf63a052f45240

  • SHA1

    f5e00b49f8e19fb160779057f36a61bd412db450

  • SHA256

    3777966a3d278a7171f60d7c400f30970cacd5b9deec8cacc58a250fd1f2cfdb

  • SHA512

    d0532d4c6828097452e9b5953eb7400a1aa6c7d803986240519d8cb4c13564f7b0330c75e244acc57e514a85eeaed93d403fb343c5539d78a285a1acc827ee1e

  • SSDEEP

    6144:bMWJr4CotEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:b1SttycSly8DSUA1YHVD

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.2f31f8ddb715c00ef3cf63a052f45240.exe

    • Size

      240KB

    • MD5

      2f31f8ddb715c00ef3cf63a052f45240

    • SHA1

      f5e00b49f8e19fb160779057f36a61bd412db450

    • SHA256

      3777966a3d278a7171f60d7c400f30970cacd5b9deec8cacc58a250fd1f2cfdb

    • SHA512

      d0532d4c6828097452e9b5953eb7400a1aa6c7d803986240519d8cb4c13564f7b0330c75e244acc57e514a85eeaed93d403fb343c5539d78a285a1acc827ee1e

    • SSDEEP

      6144:bMWJr4CotEcAJN+SYSUZCb6M3W8DStQUkA1FiHwSD:b1SttycSly8DSUA1YHVD

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks