Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.d02a8...d0.exe

windows7-x64

10

NEAS.d02a8...d0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe

  • Size

    78KB

  • Sample

    231101-rnpesshf68

  • MD5

    d02a8adf4ae17f1f6a2a8b410ba98ad0

  • SHA1

    c1666d93f102441d795092e168db0253a34ad76f

  • SHA256

    59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693

  • SHA512

    db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961

  • SSDEEP

    1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.d02a8adf4ae17f1f6a2a8b410ba98ad0.exe

    • Size

      78KB

    • MD5

      d02a8adf4ae17f1f6a2a8b410ba98ad0

    • SHA1

      c1666d93f102441d795092e168db0253a34ad76f

    • SHA256

      59c7647b4c7a0c1ed95092662ac2439f501de80c57191c8de5cc316a99240693

    • SHA512

      db8643caaa0f9778bebf4694574c4ab9499910e3edbe27d799518dbb3403afd7e84cb8e853a58c32cca02f3a81fa6757a89902704af564e138107b86a1a7c961

    • SSDEEP

      1536:rb4TdYCdSMoevzVmsi+6yf5oAnqDM+4yyF:nG0Mo4Vmsi+Cuq4cyF

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks