Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.402ea667ce8d2d7ed6ace6afe843d5f3.exe

  • Size

    168KB

  • Sample

    231101-kcgggsda6t

  • MD5

    402ea667ce8d2d7ed6ace6afe843d5f3

  • SHA1

    e5466eac71088b2b70cbbf6476d770539db55c38

  • SHA256

    2f80f327762d73f60134d358be43bda68def9de2ad1140edeaba01fc93b359ae

  • SHA512

    a52eefb9a085c7cdba3f74a70a4ca67b6f26ed4c5b2d2cd1eafe3cf4dbad6f2c84a732eb64ff4bd13a8792e1bfe0b40629038ceadfe650f979b840b7adfc46a4

  • SSDEEP

    3072:MdEUfKj8BYbDiC1ZTK7sxtLUIGd7fKCibLon+wjcIDoB5W/3v2XJR:MUSiZTK405fKCibLkpQIDorqOXj

Malware Config

Targets

    • Target

      NEAS.402ea667ce8d2d7ed6ace6afe843d5f3.exe

    • Size

      168KB

    • MD5

      402ea667ce8d2d7ed6ace6afe843d5f3

    • SHA1

      e5466eac71088b2b70cbbf6476d770539db55c38

    • SHA256

      2f80f327762d73f60134d358be43bda68def9de2ad1140edeaba01fc93b359ae

    • SHA512

      a52eefb9a085c7cdba3f74a70a4ca67b6f26ed4c5b2d2cd1eafe3cf4dbad6f2c84a732eb64ff4bd13a8792e1bfe0b40629038ceadfe650f979b840b7adfc46a4

    • SSDEEP

      3072:MdEUfKj8BYbDiC1ZTK7sxtLUIGd7fKCibLon+wjcIDoB5W/3v2XJR:MUSiZTK405fKCibLkpQIDorqOXj

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks