Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
General
-
Target
NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe
-
Size
78KB
-
Sample
231101-rnpesshf68
-
MD5
d02a8adf4ae17f1f6a2a8b410ba98ad0
-
SHA1
c1666d93f102441d795092e168db0253a34ad76f
-
SHA256
59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693
-
SHA512
db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961
-
SSDEEP
1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF
Behavioral task
behavioral1
Sample
NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe
Resource
win10v2004-20231025-en
Malware Config
Targets
-
-
Target
NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe
-
Size
78KB
-
MD5
d02a8adf4ae17f1f6a2a8b410ba98ad0
-
SHA1
c1666d93f102441d795092e168db0253a34ad76f
-
SHA256
59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693
-
SHA512
db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961
-
SSDEEP
1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF
Score10/10-
Adds autorun key to be loaded by Explorer.exe on startup
-
Malware Backdoor - Berbew
Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.
-
Executes dropped EXE
-
Loads dropped DLL
-
Drops file in System32 directory
-