Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.66272...60.exe

windows7-x64

10

NEAS.66272...60.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.66272c7b0bd901995c4785aef344bc60.exe

  • Size

    347KB

  • Sample

    231101-rg4k5sec98

  • MD5

    66272c7b0bd901995c4785aef344bc60

  • SHA1

    296200b3a0af8aaf0820ff64591f9d9a759c8b0b

  • SHA256

    27d489df9ac19facbe8a5aba7f8c38195276cf19f134a0eb256ae2ef7f05f7bf

  • SHA512

    e478ae20e89ae46aab978197c12ee06245fc2db657d81cb4bb5561271aeea1e5db87821c4d3863ab90601dfb263ed6ef41548f43c5cfaf65a2e01b0b57563f72

  • SSDEEP

    6144:lyAD3BT9uMhPg5yx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:UAD31btx4brRGFB24lwR45FB24lEk

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.66272c7b0bd901995c4785aef344bc60.exe

    • Size

      347KB

    • MD5

      66272c7b0bd901995c4785aef344bc60

    • SHA1

      296200b3a0af8aaf0820ff64591f9d9a759c8b0b

    • SHA256

      27d489df9ac19facbe8a5aba7f8c38195276cf19f134a0eb256ae2ef7f05f7bf

    • SHA512

      e478ae20e89ae46aab978197c12ee06245fc2db657d81cb4bb5561271aeea1e5db87821c4d3863ab90601dfb263ed6ef41548f43c5cfaf65a2e01b0b57563f72

    • SSDEEP

      6144:lyAD3BT9uMhPg5yx4brq2Ah1FM6234lKm3mo8Yvi4KsLTFM6234lKm3qk9:UAD31btx4brRGFB24lwR45FB24lEk

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks