Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.c4f33...e0.exe

windows7-x64

10

NEAS.c4f33...e0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c4f3326abeeb4219a8b517153f0ccde0.exe

  • Size

    236KB

  • Sample

    231101-rm299shc24

  • MD5

    c4f3326abeeb4219a8b517153f0ccde0

  • SHA1

    c86f35db61b9b5423799dd98753c86bd6709700c

  • SHA256

    0b3758cc0044e34865446d1eab0b8a00a37a7d16949b16a2630bab01fc77eb82

  • SHA512

    516c872ce32b16065c0d6351a7cd07f58280645ebb11b368bfdec4f0641cead07c9a9b29cc6a86bbf010ec0c79b19e7344fd6eca5d3ae931f0828f099b515f13

  • SSDEEP

    3072:dZW3BPGzxmN4J9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:dIBPUx04sDshsrtMsQB4

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c4f3326abeeb4219a8b517153f0ccde0.exe

    • Size

      236KB

    • MD5

      c4f3326abeeb4219a8b517153f0ccde0

    • SHA1

      c86f35db61b9b5423799dd98753c86bd6709700c

    • SHA256

      0b3758cc0044e34865446d1eab0b8a00a37a7d16949b16a2630bab01fc77eb82

    • SHA512

      516c872ce32b16065c0d6351a7cd07f58280645ebb11b368bfdec4f0641cead07c9a9b29cc6a86bbf010ec0c79b19e7344fd6eca5d3ae931f0828f099b515f13

    • SSDEEP

      3072:dZW3BPGzxmN4J9IDlRxyhTbhgu+tAcrbFAJc+RsUi1aVDkOvhJjvJUp:dIBPUx04sDshsrtMsQB4

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks