Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.0683256daae00da65a69412088903910.exe

  • Size

    218KB

  • Sample

    231101-q59avsbc42

  • MD5

    0683256daae00da65a69412088903910

  • SHA1

    9aedb1f950c9fb31c9b4247c255768802e5554ce

  • SHA256

    9e2b1dbc9cb81a22011bd0882160b8895487e3a54fb0a67414dc8b771498cae0

  • SHA512

    3085e570fe37df241325b18d09497b789f3171b4d5aa005d5229a65b36de67b4c39c5029fcb352f9f9b16b429d2412504acfb44ada04be39c82c2aa0eb491b6f

  • SSDEEP

    6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwH:KUvRK4ZusQHNd1KidKjttRYLwH

Malware Config

Targets

    • Target

      NEAS.0683256daae00da65a69412088903910.exe

    • Size

      218KB

    • MD5

      0683256daae00da65a69412088903910

    • SHA1

      9aedb1f950c9fb31c9b4247c255768802e5554ce

    • SHA256

      9e2b1dbc9cb81a22011bd0882160b8895487e3a54fb0a67414dc8b771498cae0

    • SHA512

      3085e570fe37df241325b18d09497b789f3171b4d5aa005d5229a65b36de67b4c39c5029fcb352f9f9b16b429d2412504acfb44ada04be39c82c2aa0eb491b6f

    • SSDEEP

      6144:KUSiZTK40lUHTisQt9Nd1Kid908edttRURLwH:KUvRK4ZusQHNd1KidKjttRYLwH

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

MITRE ATT&CK Enterprise v15

Tasks