Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

NEAS.c7dfb...JC.exe

windows7-x64

10

NEAS.c7dfb...JC.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    NEAS.c7dfba7811b3d0824522dbfc3bf0bee0_JC.exe

  • Size

    109KB

  • Sample

    231102-fxzrcaga6z

  • MD5

    c7dfba7811b3d0824522dbfc3bf0bee0

  • SHA1

    7f5cb427e32acbb2275ca4cab912d79679a8fced

  • SHA256

    44c2f2ae222c57590347e188f4bb0e60f9e62f25f723ff72274140934d3b4571

  • SHA512

    18de8eeb38d0cabe08e848678ead68e5b6125d4535601135a8dd3d2233f76d39766f20e256b9865e4b1e8d59425cb43853b9711056fbf788108d8fa5ab6e6ee5

  • SSDEEP

    3072:4WQqKL6qyH94oFjg8fo3PXl9Z7S/yCsKh2EzZA/z:45w9rFjggo35e/yCthvUz

Score
10/10
berbewdropperpersistencetrojan

Malware Config

Targets

    • Target

      NEAS.c7dfba7811b3d0824522dbfc3bf0bee0_JC.exe

    • Size

      109KB

    • MD5

      c7dfba7811b3d0824522dbfc3bf0bee0

    • SHA1

      7f5cb427e32acbb2275ca4cab912d79679a8fced

    • SHA256

      44c2f2ae222c57590347e188f4bb0e60f9e62f25f723ff72274140934d3b4571

    • SHA512

      18de8eeb38d0cabe08e848678ead68e5b6125d4535601135a8dd3d2233f76d39766f20e256b9865e4b1e8d59425cb43853b9711056fbf788108d8fa5ab6e6ee5

    • SSDEEP

      3072:4WQqKL6qyH94oFjg8fo3PXl9Z7S/yCsKh2EzZA/z:45w9rFjggo35e/yCthvUz

    Score
    10/10
    dropperpersistencetrojan

    • Adds autorun key to be loaded by Explorer.exe on startup

      persistence

    • Malware Backdoor - Berbew

      Berbew is a malware infection classified as a 'backdoor' Trojan. This malicious program's primary function is to cause chain infections - it can download/install additional malware such as other Trojans, ransomware, and cryptominers.

      persistencedroppertrojan

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks