Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe

  • Size

    78KB

  • Sample

    231101-rnpesshf68

  • MD5

    d02a8adf4ae17f1f6a2a8b410ba98ad0

  • SHA1

    c1666d93f102441d795092e168db0253a34ad76f

  • SHA256

    59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693

  • SHA512

    db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961

  • SSDEEP

    1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF

Malware Config

Targets

    • Target

      NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe

    • Size

      78KB

    • MD5

      d02a8adf4ae17f1f6a2a8b410ba98ad0

    • SHA1

      c1666d93f102441d795092e168db0253a34ad76f

    • SHA256

      59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693

    • SHA512

      db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961

    • SSDEEP

      1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF

    • Adds autorun key to be loaded by Explorer.exe on startup

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks